Monitoring Packet Drop Statistics - Cisco 7609 Configuration Manual

Configuring DoS Protection

Monitoring Packet Drop Statistics

Because the rate-limiting mechanism allows a certain number of packets to be forwarded for software
processing, you can view the packet drop statistics by entering NetFlow show commands from the CLI.
You can also capture the incoming or outgoing traffic on an interface and send a copy of this traffic to
an external interface for monitoring by, for example, a traffic analyzer. To capture traffic and forward it
to an external interface, use the monitor session commands.
Monitoring Dropped Packets Using NetFlow Commands
The following NetFlow commands display flows that are destined to the router MAC that are either
hardware switched or forwarded to the route processor.
Displaying statistics based on source or flow only works if the MLS NetFlow flowmask is set to a value
greater than destination-only.
Router# show mls ip
Displaying Netflow entries in Supervisor Earl
DstIP
--------------------------------------------------------------------
200.2.5.3
Pkts
---------------------------------------------------
0
Router# show mls netflow flowmask
current ip flowmask for unicast: destination only
current ipx flowmask for unicast: destination only
Router# configure terminal
Enter configuration commands, one per line.
Router(config)# mls flow ip destination-source
Router(config)# exit
1w6d: %SYS-5-CONFIG_I: Configured from console by console
Router# show mls ip
Displaying Netflow entries in Supervisor Earl
DstIP
--------------------------------------------------------------------
200.2.5.3
Pkts
---------------------------------------------------
0
Router#
When you use the show mls ip command to display information about flows for a specific source or
destination address, the command accepts 32 host prefixes only. When you use the output modifiers, you
might see all flows from a specific subnet.
Router# show mls ip source 9.9.9.2 mod 4
Displaying Netflow entries in module 4
DstIP
--------------------------------------------------------------------
9.9.9.177
Pkts
---------------------------------------------------
0
Router# show mls ip mod 4 | include 9.9.9
9.9.9.177
Cisco 7600 Series Router Cisco IOS Software Configuration Guide—12.1E
24-6
SrcIP Prot:SrcPort:DstPort
0.0.0.0 0
Bytes Age LastSeen
0 1 01:52:25
SrcIP Prot:SrcPort:DstPort
223.255.254.226 0
Bytes Age LastSeen
0 2 01:54:05
SrcIP Prot:SrcPort:DstPort
9.9.9.2 0
Bytes Age LastSeen
0 28 01:56:59
9.9.9.2 0
Chapter 24
Src i/f:AdjPtr
:0 :0 0 : 0
Attributes
L3 - Dynamic
End with CNTL/Z.
Src i/f:AdjPtr
:0 :0 0
Attributes
L3 - Dynamic
Src i/f:AdjPtr
:0 :0 0
Attributes
L3 - Dynamic
:0 :0 0 : 0
Configuring Denial of Service Protection
: 0
: 0
78-14064-04