06-20-2010 11:59 PM - edited 03-10-2019 05:12 PM
Hi All,
I am needing to find away to monitor if a monitor sessions is created/deleted or change.
Is there anyway that you know of to see that detail
06-21-2010 07:00 AM
What platform are you using?
You could monitor for syslog id "302013: Built {inbound|outbound} TCP connection_id..." and "302014: Teardown TCP connection id...".
If you are using an ASA then after version 8.2 you can use netflow to collect connection statistics with a neftlow collector.
I hope it helps.
PK
06-30-2010 09:03 PM
It is on a switch ( 2960, 3560 and 3750. All IOS at most 1 year old)
I am looking basically if anyone enters "monitor session........" a syslog event is triggered
Lachlan
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: