Switchport Auditing

Unanswered Question
May 27th, 2008
User Badges:

Hi folks,


I am currently in the process of auditing network ports in a certain vlan to see if they need to stay in use or not. Is there any way (show command)that I can reliably tell if the port is in use still? I check the counters and the status of the interface, but those are only good for the last five minutes, and the machine connected could be off or something. Is there any way I can check when data was last sent on an interface?


Sorry if this is confusing. The switches I am auditing are running:

IOS (tm) Catalyst 4000 L3 Switch Software (cat4000-I9S-M), Version 12.1(19)EW1, EARLY DEPLOYMENT RELEASE SOFTWARE (fc1)


Thanks!


-Chris

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 4 (2 ratings)
Loading.
glen.grant Tue, 05/27/2008 - 08:54
User Badges:
  • Purple, 4500 points or more

Some of the 4000 series you can use "show interfaces link" and it will tell when the port was last used or if in use currently it will show 00 secs for elapsed time.

chris.lepa Tue, 05/27/2008 - 09:00
User Badges:

You sir are a genius. Thank you very much, this is exactly what I was looking for! :)


One more question though... What unit of time is this output in? I don't quite understand what it means:


Fa2/28 1169:70148:-4208367

glen.grant Tue, 05/27/2008 - 09:15
User Badges:
  • Purple, 4500 points or more

Have no idea what that is , when I look at it , it looks like this.


Fa4/10 23 weeks, 5 days, 11 hours, 38 minutes 01 sec

Fa4/11 5 days, 21 hours, 22 minutes 22 secs

Fa4/12 00 secs

Fa4/13 00 secs

Fa4/14 23 weeks, 5 days, 11 hours, 38 minutes 01 sec

Fa4/15 00 secs

Fa4/16 00 secs

Fa4/17 23 weeks, 5 days, 11 hours, 38 minutes 01 sec

Fa4/18 23 weeks, 5 days, 11 hours, 38 minutes 01 sec

Fa4/19 23 weeks, 5 days, 11 hours, 38 minutes 01 sec

Fa4/20 00 secs

Fa4/21 00 secs

Fa4/22 1 week, 5 days, 18 hours, 21 minutes 55 secs

Fa4/23 23 weeks, 5 days, 11 hours, 38 minutes 01 sec

Fa4/24 11 weeks, 3 days, 16 hours, 53 minutes 51 secs

chris.lepa Tue, 05/27/2008 - 09:22
User Badges:

Well that output is a hell of a lot more readable than mine haha! I'll see what I can find out about it.

chris.lepa Tue, 05/27/2008 - 09:54
User Badges:

Looks like this has opened up a new question for me... I can't find documentation on this command and the difference in output anywhere!


Anyone know why there's a difference between my output from show interfaces link command:


Port Name Down Time

Gi1/1 00:00:00

Gi1/2 00:00:00

Fa2/1 1170:70203:-4211984

Fa2/2 00:00:00

Fa2/3 523:31408:-1882753


... and glen.grant's output? I hope somebody that understands can chime in... Thanks!


-Chris

glen.grant Tue, 05/27/2008 - 10:52
User Badges:
  • Purple, 4500 points or more

What code version are you running ? The version I was using is 12.2.24 EWA .

chris.lepa Tue, 05/27/2008 - 10:56
User Badges:

Version 12.1(19)EW1, EARLY DEPLOYMENT RELEASE SOFTWARE (fc1)

ROM: 12.2(20r)EW1


I've been googling for command references for that release and I never find anything reliable...


glen.grant Tue, 05/27/2008 - 11:21
User Badges:
  • Purple, 4500 points or more

Wonder if 12.1 code laid it out in a different format ?

chris.lepa Tue, 05/27/2008 - 12:06
User Badges:

Yeah that's what I'm guessing. I just can't find how to read it documented anywhere! I hope somebody here is familiar with this format.

Actions

This Discussion