Effective way of monitoring uRPF violations

[cmdathp2010]

From

http://www.cisco.com/en/US/docs/ios/12_2/security/configuration/guide/scfrpf.html#wp1001215

There is seems to be no effective direct method for monitoring uRPF violations. 

The only indrect method seems to be having a "deny ip any any log" ACL and attach to the uRPF configuration.  However this is a bit risky if someone is flooding the system with uRPF failed packets.

Does any one have more effective way for it?  Thanks.

[daniel.dib]

Check if you have SNMP support for it.

http://www.cisco.com/en/US/docs/ios-xml/ios/sec_data_urpf/configuration/12-4t/sec-urpf-mib.pdf

Daniel Dib
CCIE #37149