06-20-2010 11:59 PM - edited 03-10-2019 05:12 PM
Hi All,
I am needing to find away to monitor if a monitor sessions is created/deleted or change.
Is there anyway that you know of to see that detail
06-21-2010 07:00 AM
What platform are you using?
You could monitor for syslog id "302013: Built {inbound|outbound} TCP connection_id..." and "302014: Teardown TCP connection id...".
If you are using an ASA then after version 8.2 you can use netflow to collect connection statistics with a neftlow collector.
I hope it helps.
PK
06-30-2010 09:03 PM
It is on a switch ( 2960, 3560 and 3750. All IOS at most 1 year old)
I am looking basically if anyone enters "monitor session........" a syslog event is triggered
Lachlan
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide