show access-list command

[eduardo_sanchez]

I have a couple of questions about the output of this command.

The first is how long are match statistics kept.

The second is about "check" counters. Documentation says that this counter increments every time a packet is checked again the rule, but it doesn't match. If so, if there are matches in a particular line, there shold be checks in the previous ones. But I see lines with mathes after lines without checks.

Thanks.

[keith.campbell]

You are correct, there should not be a line with a match count following a line without a check count, unless your access list has been modified and the statistics no longer apply to the current configuration.

The statistics stay until you issue a 'clear ip access-list counters ..' command or reload etc.

Try clearing the counters and view the statistics again.

[eduardo_sanchez]

Ok, it does make sense.

I'm going to clear the statistics and take a look on it again.

cheers.