Show hit count for each line in an Object-Group?

[jasonhprice]

I found this old link while searching for a solution, but I guess this it outdated information? When I sh access-list it only displays the Object-Groups as as a single line with a statement at the end such as (22342 matches)

https://supportforums.cisco.com/discussion/10476646/hit-counts-against-object-group-objects

Is there any way to view hit counts for an Object-Group broken out on a line-per-line basis? 

[Karsten Iwen · Accepted solution]

You are talking about ACLs on an IOS router? I'm not aware of any command that shows these individual hits on that platform.

If you are talking about the ASA as in the referenced discussion, I remember a bug a very long time ago where the counters were not correctly displayed. An image upgrade would help here.

[jasonhprice]

Yes, I'm referring to a router with IOS. Thanks for the clarification. When I found the link I posted above originally I didn't notice it was in the "Firewall" sub-forum so I didn't realize it referenced ASA instead. 

[Julio E. Moisa]

Hi 

I have used object-groups on routers and switches and unfortunately they don't show hits per line like the ASA does. 

You could try to use debug: ip access-list peruser during not operation hours. 

Regards.