Monitoring Copp - Cisco 7604 Configuration Manual

Chapter 36 Configuring Denial of Service Protection

Monitoring CoPP

You can enter the show policy-map control-plane command for developing site-specific policies,
monitoring statistics for the control plane policy, and troubleshooting CoPP. This command displays
dynamic information about the actual policy applied, including rate information and the number of bytes
(and packets) that conformed or exceeded the configured policies both in hardware and in software.
The output of the show policy-map control-plane command is as follows:
Router# show policy-map control-plane
Control Plane Interface
Service policy CoPP-normal
Hardware Counters:
class-map: CoPP-normal (match-all)
Software Counters:
Router#
To display the hardware counters for bytes dropped and forwarded by the policy, enter the show mls qos
ip command:
Router# show mls qos ip
QoS Summary [IP]:
Int Mod Dir
-------------------------------------------------------------------------------
CPP
CPP
Router#
To display the CoPP access list information, enter the show access-lists coppacl-bgp command:
Router#show access-lists coppacl-bgp
Extended IP access list coppacl-bgp
10 permit tcp host 47.1.1.1 host 10.9.9.9 eq bgp (4 matches)
20 permit tcp host 47.1.1.1 eq bgp host 10.9.9.9
30 permit tcp host 10.86.183.120 host 10.9.9.9 eq bgp (1 match)
40 permit tcp host 10.86.183.120 eq bgp host 10.9.9.9
OL-4266-08
Match: access-group 130
police :
96000 bps 3000 limit 3000 extended limit
Earl in slot 3 :
0 bytes
5 minute offered rate 0 bps
aggregate-forwarded 0 bytes action: transmit
exceeded 0 bytes action: drop
aggregate-forward 0 bps exceed 0 bps
Earl in slot 5 :
0 bytes
5 minute offered rate 0 bps
aggregate-forwarded 0 bytes action: transmit
exceeded 0 bytes action: drop
aggregate-forward 0 bps exceed 0 bps
Class-map: CoPP-normal (match-all) 0 packets, 0 bytes
5 minute offered rate 0 bps, drop rate 0 bps
Match: access-group 130
police:
96000 bps, 3125 limit, 3125 extended limit
conformed 0 packets, 0 bytes; action: transmit
exceeded 0 packets, 0 bytes; action: drop
conformed 0 bps, exceed 0 bps, violate 0 bps
(* - shared aggregates, Mod - switch module)
Class-map DSCP
5 In CoPP-normal 0
9 In CoPP-normal 0
Cisco 7600 Series Router Cisco IOS Software Configuration Guide, Release 12.2SX
Agg Trust Fl AgForward-By
Id Id
1 dscp 0 505408
4 dscp 0
Monitoring CoPP
AgPoliced-By
83822272
0 0
36-31