Brocade Multi-Service IronWare Security Configuration Guide (Supporting R05.6.00) - Manual (Page 178)

160 Multi-Service IronWare Security Configuration Guide
53-1003035-02
ACL accounting
3
Displaying statistics for an interface
To display statistics for an interface, enter commands such as the following.
The display shows the following information:
Syntax: show access-list accounting ethernet [slot/port | ve ve-number ] in | out [l2 |
policy-based-routing | rate-limit]
Use ethernet slot or port to display a report for a physical interface.
Use ve ve-number to display a report for the ports that are included in a virtual routing interface.
For example, if ports 1/2, 1/4, and 1/6 are all members of ve 2, the report includes information for
all three ports.
Use the in parameter to display statistics for incoming traffic; out for outgoing traffic.
The l2 parameter limits the display to Layer 2 ACL accounting information.
This field... Displays...
The IP multicast traffic snooping
state The first line of the display indicates whether IP multicast traffic snooping
is enabled or disabled. If enabled, it indicates if the feature is configured
as passive or active.
Collecting ACL accounting summary
for interface Shows the interface included in the report and whether or not the
collection was successful.
Outbound or Inbound ACL ID Shows the direction of the traffic on the interface and the ID of the ACL
used.
# Shows the index of the ACL entry, starting with 0, followed by the permit or
deny condition defined for that ACL entry. (The first entry created for an
ACL is assigned the index 0. The next one created is indexed as 1, and so
on.)
ACL entries are arranged beginning with the entry with the highest number
of hits for IPv4 ACLs. For all other options, ACL entries are displayed in
order of ascending ACL filter IDs.
Hit count Shows the number of hits for each counter.
NOTE: On Brocade NetIron CES and Brocade NetIron CER devices this
field will show “Accounting is not enabled” for those clauses which
do not include the keyword enable-accounting and “Accounting is
not available due to deny logging” for those clauses in which
accounting and deny logging are both enabled.
Brocade (config)#show access-list accounting ve 1 in
Collecting ACL accounting for VE 1 ... Completed successfully.
ACL Accounting Information:
Inbound: ACL 111
1: deny tcp any any
Hit count: (1 sec) 237000 (1 min)12502822
(5 min) 87014178 (accum) 99517000
3: permit ip any any
Hit count: (1 sec) 236961 (1 min) 13037569
(5 min) 0 (accum) 13037569
0: deny tcp 10.1.1.0 10.0.0.255 10.2.2.0 10.0.0.255
Hit count: (1 sec) 0 (1 min) 0
(5 min) 0 (accum) 0
2: deny udp any any
Hit count: (1 sec) 0 (1 min) 0
(5 min) 0 (accum) 0