System Accounting - Cisco Catalyst 2960 series Configuration Manual

Information About Configuring Accounting
Wed Jun 27 04:30:09 2001
The following example shows the information contained in a TACACS+ connection accounting record for
an outbound rlogin connection:
Wed Jun 27 03:48:46 2001
start
username1-sun /user username1
Wed Jun 27 03:51:37 2001
stop
username1-sun /user username1 bytes_in=659926 bytes_out=138
out=1251
The following example shows the information contained in a TACACS+ connection accounting record for
an outbound LAT connection:
Wed Jun 27 03:53:06 2001
start
VAX
Wed Jun 27 03:54:15 2001
stop
VAX bytes_in=0

System Accounting

System accounting provides information about all system-level events (for example, when the system reboots
or when accounting is turned on or off).
The following accounting record shows a typical TACACS+ system accounting record server indicating that
AAA Accounting has been turned off:
Wed Jun 27 03:55:32 2001
service=system
The precise format of accounting packets records may vary depending on the TACACS+ daemon.
Note
Consolidated Platform Configuration Guide, Cisco IOS Release 15.2(4)E (Catalyst 2960-X Switches)
1012
Acct-Authentic = RADIUS
Service-Type = Login
Acct-Session-Id = "0000000A"
Login-Service = Rlogin
Login-IP-Host = "10.68.202.158"
Acct-Delay-Time = 0
User-Id = "username1"
NAS-Identifier = "172.16.25.15"
NAS-IP-Address = "172.16.25.15"
NAS-Port = 2
User-Name = "username1"
Client-Port-DNIS = "4327528"
Caller-ID = "5622329477"
Acct-Status-Type = Stop
Acct-Authentic = RADIUS
Service-Type = Login
Acct-Session-Id = "0000000A"
Login-Service = Rlogin
Login-IP-Host = "10.68.202.158"
Acct-Input-Octets = 18686
Acct-Output-Octets = 86
Acct-Input-Packets = 90
Acct-Output-Packets = 68
Acct-Session-Time = 22
Acct-Delay-Time = 0
User-Id = "username1"
NAS-Identifier = "172.16.25.15"
task_id=12 service=connection
task_id=12 service=connection
elapsed_time=171
task_id=18 service=connection
task_id=18 service=connection
bytes_out=0
event=sys_acct
172.16.25.15 username1
protocol=rlogin addr=10.68.202.158 cmd=rlogin
172.16.25.15 username1
protocol=rlogin addr=10.68.202.158 cmd=rlogin
172.16.25.15 username1
protocol=lat
172.16.25.15 username1
protocol=lat
paks_in=0 paks_out=0
172.16.25.15 unknown unknown unknown start
reason=reconfigure
tty3 5622329430/4327528
tty3 5622329430/4327528
paks_in=2378 paks_
tty3 5622329430/4327528
addr=VAX cmd=lat
tty3 5622329430/4327528
addr=VAX cmd=lat
elapsed_time=6
task_id=25