[c-nsp] Cisco command to see active session on "cisco WS-C6503-E (R7000)"

[Randy]

People,

Can we step back here and ask OP (Samol) what EXACTLY he is trying to accomplish? (I agree, OP's example of netstat didn't help!!)

a) By active-sessions, does OP mean "sessions that treminate on router"??
 If above is the case:
1) show user
2) sh tcp brief

...should all help OP.

b)for sessions-transiting - Meaningless-Question; unless of course there is an FWSM in which case OP needs to looks x-lates to start!

Regards,
./Randy

--- On Wed, 12/12/12, Andrew Jones <Andrew.Jones at alphawest.com.au> wrote:

> From: Andrew Jones <Andrew.Jones at alphawest.com.au>
> Subject: Re: [c-nsp] Cisco command to see active session on "cisco WS-C6503-E (R7000)"
> To: "Samol" <molasian at gmail.com>
> Cc: "cisco-nsp at puck.nether.net" <cisco-nsp at puck.nether.net>
> Date: Wednesday, December 12, 2012, 6:54 PM
> No such thing, as sessions don't
> terminate on the router, and it doesn't track state of
> traffic like a firewall might.
> 
> You need something like netflow to monitor and record the
> traffic.
> 
> Netstat works on a windows machine as the sessions are
> terminated on that server.
> 
> Andrew Jones
> Alphawest | Optus Business
> 
> From: Samol [mailto:molasian at gmail.com]
> Sent: Thursday, 13 December 2012 1:47 PM
> To: Andrew Jones
> Cc: cisco-nsp at puck.nether.net
> Subject: RE: [c-nsp] Cisco command to see active session on
> "cisco WS-C6503-E (R7000)"
> 
> 
> Hi Aj,
> 
> that command can do without having to enable this. its like
> the command uses on windows "netstat?" so that see can see
> the active sessions which
> are goung thru router.
> 
> Regards,
> Sam
> On Dec 13, 2012 9:40 AM, "Andrew Jones" <Andrew.Jones at alphawest.com.au<mailto:Andrew.Jones at alphawest.com.au>>
> wrote:
> Ok, so you mean sessions going through the router?
> 
> You need netflow enabled on the switch, then enable "ip flow
> ingress"  and "ip flow egress" on the interface you are
> interested in, then perform a "show ip cache flow"
> 
> It will give you this info, but alot of it uses HEX codes
> you need to translate... (google is your friend)
> 
> Andrew Jones
> Alphawest | Optus Business
> 
> From: Samol [mailto:molasian at gmail.com<mailto:molasian at gmail.com>]
> Sent: Thursday, 13 December 2012 1:25 PM
> To: Andrew Jones
> Cc: cisco-nsp at puck.nether.net<mailto:cisco-nsp at puck.nether.net>
> Subject: Re: [c-nsp] Cisco command to see active session on
> "cisco WS-C6503-E (R7000)"
> 
> Hi AJ,
> 
> No, the output of this command shows us the
> source/Destinaion IP address using UDP or TCP etc.
> 
> Regards,
> Sam
> 
> 2012/12/13 Andrew Jones <Andrew.Jones at alphawest.com.au<mailto:Andrew.Jones at alphawest.com.au>>
> Do you mean to see who is logged into the cli?
> 
> Try  "who"
> 
> Andrew Jones
> 
> -----Original Message-----
> From: cisco-nsp-bounces at puck.nether.net<mailto:cisco-nsp-bounces at puck.nether.net>
> [mailto:cisco-nsp-bounces at puck.nether.net<mailto:cisco-nsp-bounces at puck.nether.net>]
> On Behalf Of Samol
> Sent: Thursday, 13 December 2012 12:57 PM
> To: cisco-nsp at puck.nether.net<mailto:cisco-nsp at puck.nether.net>
> Subject: [c-nsp] Cisco command to see active session on
> "cisco WS-C6503-E (R7000)"
> 
> Hi All,
> 
> I believe there is a command that we can use to see the
> active sessions
> on cisco WS-C6503-E (R7000), but somehow I can't remember
> what the command
> is. Pls let me know if you know this command.
> 
> Regards,
> Sam
> _______________________________________________
> cisco-nsp mailing list  cisco-nsp at puck.nether.net<mailto:cisco-nsp at puck.nether.net>
> https://puck.nether.net/mailman/listinfo/cisco-nsp
> archive at http://puck.nether.net/pipermail/cisco-nsp/
> 
> _______________________________________________
> cisco-nsp mailing list  cisco-nsp at puck.nether.net
> https://puck.nether.net/mailman/listinfo/cisco-nsp
> archive at http://puck.nether.net/pipermail/cisco-nsp/
>