Sorting Access-Control lists based on usage statistics

[nibose]

Hello Everyone!

I'm aware of the Show access-list command, which I regularly use on a Cisco ASA to display the ACLs usage statistics.  I'm wondering if there's any way to display the acls based on the usage, i.e. with top hit counts first or ACLs with no hit counts.

I did try searching the wild wild web but to no avail.

Thanks,

Nitin

[Marvin Rhoads]

There's no direct command to do this as far as I know. When I've had to it it in the past I would export the show command output to an external tool (like Excel), parse the data and then sort by the "hitcnt=" value.

My initial command reduces some of the lines as follows:

sh access-list | ex hitcnt=0|elements|remark

...then in Excel do a "text to columns" operation and sort the result.