Switchport Auditing

chris.lepa · ‎05-27-2008

Hi folks,

I am currently in the process of auditing network ports in a certain vlan to see if they need to stay in use or not. Is there any way (show command)that I can reliably tell if the port is in use still? I check the counters and the status of the interface, but those are only good for the last five minutes, and the machine connected could be off or something. Is there any way I can check when data was last sent on an interface?

Sorry if this is confusing. The switches I am auditing are running:

IOS (tm) Catalyst 4000 L3 Switch Software (cat4000-I9S-M), Version 12.1(19)EW1, EARLY DEPLOYMENT RELEASE SOFTWARE (fc1)

Thanks!

-Chris

glen.grant · ‎05-27-2008

Some of the 4000 series you can use "show interfaces link" and it will tell when the port was last used or if in use currently it will show 00 secs for elapsed time.

chris.lepa · ‎05-27-2008

You sir are a genius. Thank you very much, this is exactly what I was looking for! :)

One more question though... What unit of time is this output in? I don't quite understand what it means:

Fa2/28 1169:70148:-4208367

glen.grant · ‎05-27-2008

Have no idea what that is , when I look at it , it looks like this.

Fa4/10 23 weeks, 5 days, 11 hours, 38 minutes 01 sec

Fa4/11 5 days, 21 hours, 22 minutes 22 secs

Fa4/12 00 secs

Fa4/13 00 secs

Fa4/14 23 weeks, 5 days, 11 hours, 38 minutes 01 sec

Fa4/15 00 secs

Fa4/16 00 secs

Fa4/17 23 weeks, 5 days, 11 hours, 38 minutes 01 sec

Fa4/18 23 weeks, 5 days, 11 hours, 38 minutes 01 sec

Fa4/19 23 weeks, 5 days, 11 hours, 38 minutes 01 sec

Fa4/20 00 secs

Fa4/21 00 secs

Fa4/22 1 week, 5 days, 18 hours, 21 minutes 55 secs

Fa4/23 23 weeks, 5 days, 11 hours, 38 minutes 01 sec

Fa4/24 11 weeks, 3 days, 16 hours, 53 minutes 51 secs

chris.lepa · ‎05-27-2008

Well that output is a hell of a lot more readable than mine haha! I'll see what I can find out about it.

chris.lepa · ‎05-27-2008

Looks like this has opened up a new question for me... I can't find documentation on this command and the difference in output anywhere!

Anyone know why there's a difference between my output from show interfaces link command:

Port Name Down Time

Gi1/1 00:00:00

Gi1/2 00:00:00

Fa2/1 1170:70203:-4211984

Fa2/2 00:00:00

Fa2/3 523:31408:-1882753

... and glen.grant's output? I hope somebody that understands can chime in... Thanks!

-Chris

glen.grant · ‎05-27-2008

What code version are you running ? The version I was using is 12.2.24 EWA .

chris.lepa · ‎05-27-2008

Version 12.1(19)EW1, EARLY DEPLOYMENT RELEASE SOFTWARE (fc1)

ROM: 12.2(20r)EW1

I've been googling for command references for that release and I never find anything reliable...

glen.grant · ‎05-27-2008

Wonder if 12.1 code laid it out in a different format ?

chris.lepa · ‎05-27-2008

Yeah that's what I'm guessing. I just can't find how to read it documented anywhere! I hope somebody here is familiar with this format.

chris.lepa · ‎05-28-2008

*bump for Wednesday morning crowd*