[mrtg] Re: cisco - routers - access lists dropping packets - graphing?

[Daniel J McDonald]

I also don't believe there is a mib counter for those drops.

You could use CAR with a policy of drop to measure it, but I wouldn't want
to take that performance hit on the router.

You could also parse the output of:
Austin3640#sh ip access-l firewall3 | inc deny.+match
    deny ip 169.254.0.0 0.0.255.255 any (20 matches)
    deny ip 172.16.0.0 0.15.255.255 any (159 matches)
    deny icmp any any echo (4376 matches)
    deny tcp any any established (228585 matches)
    deny udp any any (33929 matches)
    deny ip any any log (1748 matches)

A quick parse with a little perl script $line =~ /\((\d+) matches/; $total
+= $1;
and you can generate the number.

Daniel J McDonald - CCIE 2495, CNX
Principal Network Specialist
Digicon Technologies
http://www.digicontech.com
dmcdonald at digicontech.com

Digicon - A Cisco Systems Partner, Silver Certified.
-----Original Message-----
From: mrtg-bounce at list.ee.ethz.ch [mailto:mrtg-bounce at list.ee.ethz.ch]On
Behalf Of Larry Sheldon
Sent: Wednesday, June 27, 2001 3:34 PM
To: alex at slot.hollandcasino.nl
Cc: dmahler at telcordia.com; mrtg at list.ee.ethz.ch
Subject: [mrtg] Re: cisco - routers - access lists dropping packets -
graphing?


> I don't think the ifInDiscards will count rejected/dropped packets.
> Discards are, unless I'm mistaking, damaged packets such as CRC errors.
> (please tell me I'm wrong if I am).

One of us is going to have to go look it up, I think those are bothe wrong.

I think "discards" are packets that were not forwarded, and were not
accounted-for anywhere else.
--
-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-
.                                                                       .
- L. F. (Larry) Sheldon, Jr.                                            -
. Unix Systems and Network Administration                               .
- Creighton University Computer Center-Old Gym                          -
. 2500 California Plaza                                                 .
- Omaha, Nebraska, U.S.A.  68178       Two identifying characteristics  -
. lsheldon at creighton.edu                  of System Administrators:     .
- 402 280-2254 (work)                Infallibility, and the ability to  -
. 402 681-4726 (cellular)               learn from their mistakes.      .
- 402 332-4622 (residence)                                              -
. http://www.creighton.edu/~lsheldon    Adapted from Stephen Pinker     .
-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-

--
Unsubscribe mailto:mrtg-request at list.ee.ethz.ch?subject=unsubscribe
Archive     http://www.ee.ethz.ch/~slist/mrtg
FAQ         http://faq.mrtg.org    Homepage     http://www.mrtg.org
WebAdmin    http://www.ee.ethz.ch/~slist/lsg2.cgi



--
Unsubscribe mailto:mrtg-request at list.ee.ethz.ch?subject=unsubscribe
Archive     http://www.ee.ethz.ch/~slist/mrtg
FAQ         http://faq.mrtg.org    Homepage     http://www.mrtg.org
WebAdmin    http://www.ee.ethz.ch/~slist/lsg2.cgi