cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
16025
Views
41
Helpful
15
Replies

View packet size stats

wilson_1234_2
Level 3
Level 3

Sorry for the simple question, but there is a command that will allow you to view the statistics of packets and I cannot remember what it is.

For example, I am looking for how many packets of a certain size.

15 Replies 15

Thanks edison,

But I seem to remember that I could see the actual packet size and how many of each packet of a certain size.

Something like

24 bytes 10397

1472 bytes 100345

Do you recall anything like this?

Sorry Edison, I realize this doing the same thing, but I seem to remember the format was much different.

Thanks.

Hello, I know this thread is "only" 11 years old.. anyway the command is "show interface <int> counters detailed" but it may not be available on all platforms/versions. Below is from a Nexus sw running 7.3(x). Same command is not available on Cat 6880 running 15.1(x) for instance.

 

switch# sh int e1/1 counters detailed 
Ethernet1/1
  Rx Packets:                                159409461082
  Rx Unicast Packets:                        159356881760
  Rx Multicast Packets:                          52579300
  Rx Jumbo Packets:                                  4726
  Rx Bytes:                               127165198256828
  Rx Packets from 0 to 64 bytes:                133405595
  Rx Packets from 65 to 127 bytes:            57353724961
  Rx Packets from 128 to 255 bytes:           15759673723
  Rx Packets from 256 to 511 bytes:            4739034293
  Rx Packets from 512 to 1023 bytes:           7021053640
  Rx Packets from 1024 to 1518 bytes:          1141240401
  Rx Packets from 1519 to 1548 bytes:         73261323743
  Tx Packets:                                411886056110
  Tx Unicast Packets:                        411629132274
  Tx Multicast Packets:                         256923783
  Tx Jumbo Packets:                                   512
  Tx Bytes:                               474661619793427
  Tx Packets from 0 to 64 bytes:               5734903681
  Tx Packets from 65 to 127 bytes:            63499970589
  Tx Packets from 128 to 255 bytes:           21160923683
  Tx Packets from 256 to 511 bytes:            7470697635
  Tx Packets from 512 to 1023 bytes:          16057206960
  Tx Packets from 1024 to 1518 bytes:          7536035407
  Tx Packets from 1519 to 1548 bytes:        290426317643
  Layer 3 Routed InputPackets         7072712867102886457
  Layer 3 Routed Input Bytes          3699305532767394713
  Layer 3 Unicast InputPackets               873424440883
  Layer 3 Unicast Input Bytes             691964079781919
  Layer 3 Multicast Input Packets               270487929
  Layer 3 Multicast Input Bytes               47408688631
  Layer 3 Unicast Output Packets            2007093909415
  Layer 3 Unicast Output Bytes           2219225387164580
  Layer 3 Multicast Output Packets              789492468
  Layer 3 Multicast Output Bytes             118228078049
  InLayer3AveragePackets                   10484337543080
  InLayer3AverageOctets                  8304137429716913

cheers

FedS

#metoo ... searching for this after that long time and just few days later than you! :-)

Thanks a lot for this refreshing of my memory, as I stumbled upon this a long time ago... Have a good time!

Peter

nbhalla
Cisco Employee
Cisco Employee

Hi Richard,

Would you elaborate what exactly are you trying to view?

Are you looking for "show ip traffic" command?

This command gives details of IP, ICMP, UDP, TCP, ARP, BGP, EIGRP, OSPF etc packets.

I am looking for (and the show buffers may be doing this) packets only and how many of each size are being passed through an interface.

I have seen it before and it was like a summary and showed a list of the packet sized and how many of each.

Richard,

The output is as summarized as it can get :)

sh buffers

Load for five secs: 3%/2%; one minute: 2%; five minutes: 2%

Time source is NTP, 11:23:55.208 DST Fri Aug 14 2009

Buffer elements:

498 in free list (500 max allowed)

2591575904 hits, 0 misses, 0 created

Public buffer pools:

Small buffers, 104 bytes (total 1024, permanent 1024, peak 1238 @ 7w0d):

1019 in free list (128 min, 2048 max allowed)

797892403 hits, 1339 misses, 1318 trims, 1318 created

61 failures (0 no memory)

Medium buffers, 256 bytes (total 3000, permanent 3000):

2999 in free list (64 min, 3000 max allowed)

21639153 hits, 0 misses, 0 trims, 0 created

0 failures (0 no memory)

Middle buffers, 600 bytes (total 512, permanent 512):

509 in free list (64 min, 1024 max allowed)

14269406 hits, 0 misses, 0 trims, 0 created

0 failures (0 no memory)

Big buffers, 1536 bytes (total 1000, permanent 1000):

999 in free list (64 min, 1000 max allowed)

109736488 hits, 0 misses, 0 trims, 0 created

0 failures (0 no memory)

VeryBig buffers, 4520 bytes (total 11, permanent 10, peak 62 @ 7w0d):

11 in free list (0 min, 100 max allowed)

11844225 hits, 9512 misses, 19023 trims, 19024 created

0 failures (0 no memory)

Large buffers, 9240 bytes (total 8, permanent 8):

8 in free list (0 min, 10 max allowed)

1470 hits, 0 misses, 0 trims, 0 created

0 failures (0 no memory)

Huge buffers, 18024 bytes (total 2, permanent 2):

2 in free list (0 min, 4 max allowed)

2618 hits, 0 misses, 0 trims, 0 created

0 failures (0 no memory)

Thanks buddy, you are right.

I appreciate your help edison.

I must be remembering something else

Probably "show ip accounting" will help you. You need to enable IP accounting on the interface before using it.

It provides outputs like below.

#sh ip accounting

Source Destination Packets Bytes

Accounting data age is 0

Let me know if it helps or not.

Thanks, but I tried that and it shows individual packets.

I seem to remember there was a list of packet sizes and how many of each size had been sent.

I could be remembering incorrectly.

Thanks for the assistance.

Perhaps you're remembering flow cache's summary stats?

e.g.

router#sh ip cache f

IP packet size distribution (437276353 total packets):

1-32 64 96 128 160 192 224 256 288 320 352 384 416 448 480

.000 .192 .215 .047 .079 .014 .046 .005 .003 .006 .004 .002 .002 .002 .001

512 544 576 1024 1536 2048 2560 3072 3584 4096 4608

.000 .001 .002 .127 .243 .000 .000 .000 .000 .000 .000

.

.

.

Eurika!!!

I think that is it.

Thanks Joseph.

Thank you everyone.

rwilliams6
Level 1
Level 1

I recommend you run show controllers ethernet-controller X where X is your port.

Hope this helps.

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Innovations in Cisco Full Stack Observability - A new webinar from Cisco