cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
603
Views
0
Helpful
2
Replies

Monitor the creation of monitor sessions

lachlanpeters
Level 1
Level 1

Hi All,

I am needing to find away to monitor if a monitor sessions is created/deleted or change.

Is there anyway that you know of to see that detail

2 Replies 2

Panos Kampanakis
Cisco Employee
Cisco Employee

What platform are you using?

You could monitor for syslog id "302013: Built {inbound|outbound} TCP connection_id..." and "302014: Teardown TCP connection id...".

If you are using an ASA then after version 8.2 you can use netflow to collect connection statistics with a neftlow collector.

I hope it helps.

PK

It is on a switch ( 2960, 3560 and 3750. All IOS at most 1 year old)

I am looking basically if anyone enters "monitor session........" a syslog event is triggered

Lachlan

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: