<html><head></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; ">I think this is what you are looking for:<div>[stefano_ppp]se32-srapari#sh access-group ip-filter 5/10 vlan-id 300 in counters<br><br>Circuit 5/10 vlan-id 300 pppoe 2130, slot 5, access-list test, in, 2 rules<br><br>Hit Count: 0 No Match (Default)<br>Hit Count: 0 seq 10 permit ip any any<br>Hit Count: 0 seq 20 deny ip any any<br>[stefano_ppp]se32-srapari#sh sub act all <br>stefanofreebsd@stefano_ppp<br> Circuit 5/10 vlan-id 300 pppoe 2130<br> Internal Circuit 5/10:1023:63/1/2/8214<br> Interface bound SUBSCRIBER<br> Current port-limit unlimited<br> profile test (applied)<br> context-name stefano_ppp (applied)<br> ip address 2.1.1.1 (applied)<br> ppp mtu 1492 (applied from sub_default)<br> dns primary 155.53.247.12 (applied from sub_default)<br> dns secondary 155.53.12.12 (applied from sub_default)<br> idle timeout direction in (applied from sub_default)<br> timeout absolute 86400 (applied)<br><b> ip access-group in test (applied with count)<br> ip access-group out test (applied with count)<br></b> timeout idle 900 (applied from sub_default)<br>[stefano_ppp]se32-srapari#<br><br></div><div>Thanks</div><div>Stefano</div><div><br></div><div><div><blockquote type="cite"><div><br>This was a recurrent question from our support guys and we never found<br>a way to see hits with an access-list.<br><br>A workaround is to configure a metering or policing policy that does<br>not drop traffic, make sure you use the "counters" keyword. Example<br>config below<br><br>To see the matches do "sh circuit counters <slot/port><br>[vlan-id|pvc|dlci] <#> detail<br><br>--------------------------------------<br><br>context cust_context<br><br>policy access-list 169<br>seq 10 permit icmp any host 10.204.234.16 dscp eq af11 class af11_packets<br>seq 70 permit icmp any host 10.204.234.16 dscp eq af31 class af31_packets<br>seq 80 permit icmp any host 10.204.234.16 dscp eq af32 class af32_packets<br>seq 110 permit icmp any host 10.204.234.16 dscp eq cs3 class cs3_packets<br>seq 120 permit icmp any host 10.204.234.16 dscp eq cs7 class cs7_packets<br>seq 130 permit icmp any host 10.204.234.16 dscp eq ef class ef_packets<br>seq 140 permit icmp any host 10.204.234.16 dscp eq df class df_packets<br>seq 150 permit ip any any class CATCH_ALL_PACKETS<br><br>qos policy COUNT_PACKETS policing<br> rate informational 1000000 time-burst 1700 counters<br> access-group 169 cust_context<br> class af11_packets<br> rate percentage 12 counters<br> exceed no-action<br> violate no-action<br> class af31_packets<br> rate percentage 12 counters<br> exceed no-action<br> violate no-action<br> class af32_packets<br> rate percentage 12 counters<br> exceed no-action<br> violate no-action<br> class cs3_packets<br> rate percentage 12 counters<br> exceed no-action<br> violate no-action<br> class cs7_packets<br> rate percentage 12 counters<br> exceed no-action<br> violate no-action<br> class ef_packets<br> rate percentage 12 counters<br> exceed no-action<br> violate no-action<br> class df_packets<br> rate percentage 12 counters<br> exceed no-action<br> violate no-action<br> class CATCH_ALL_PACKETS<br> rate percentage 12 counters<br> exceed no-action<br> violate no-action<br><br>port atm 3/2<br> atm pvc 0 200 profile 5MB-VBRNRT encapsulation route1483<br> qos policy policing COUNT_PACKETS<br><br>On 18 November 2010 13:59, Richard Clayton <<a href="mailto:sledge121@gmail.com">sledge121@gmail.com</a>> wrote:<br><blockquote type="cite">Hello<br></blockquote><blockquote type="cite"><br></blockquote><blockquote type="cite">Is there a command I can run that will show hit counts on access lists, I<br></blockquote><blockquote type="cite">ran 'show policy access-list' but it didn't show hits, I'm not sure if this<br></blockquote><blockquote type="cite">is how the command works or I may just not be matching anything with my<br></blockquote><blockquote type="cite">access list.<br></blockquote><blockquote type="cite"><br></blockquote><blockquote type="cite">Thanks<br></blockquote><blockquote type="cite">Rick<br></blockquote><blockquote type="cite">_______________________________________________<br></blockquote><blockquote type="cite">redback-nsp mailing list<br></blockquote><blockquote type="cite"><a href="mailto:redback-nsp@puck.nether.net">redback-nsp@puck.nether.net</a><br></blockquote><blockquote type="cite"><a href="https://puck.nether.net/mailman/listinfo/redback-nsp">https://puck.nether.net/mailman/listinfo/redback-nsp</a><br></blockquote><blockquote type="cite"><br></blockquote><blockquote type="cite"><br></blockquote>_______________________________________________<br>redback-nsp mailing list<br><a href="mailto:redback-nsp@puck.nether.net">redback-nsp@puck.nether.net</a><br>https://puck.nether.net/mailman/listinfo/redback-nsp<br></div></blockquote></div><br></div></body></html>