Monitor the creation of monitor sessions

Unanswered Question
Jun 20th, 2010

Hi All,

I am needing to find away to monitor if a monitor sessions is created/deleted or change.

Is there anyway that you know of to see that detail

I have this problem too.
0 votes
  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Panos Kampanakis Mon, 06/21/2010 - 07:00

What platform are you using?

You could monitor for syslog id "302013: Built {inbound|outbound} TCP connection_id..." and "302014: Teardown TCP connection id...".

If you are using an ASA then after version 8.2 you can use netflow to collect connection statistics with a neftlow collector.

I hope it helps.


lachlanpeters Wed, 06/30/2010 - 21:03

It is on a switch ( 2960, 3560 and 3750. All IOS at most 1 year old)

I am looking basically if anyone enters "monitor session........" a syslog event is triggered



This Discussion

Related Content