Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Community Member

Monitor the creation of monitor sessions

Hi All,

I am needing to find away to monitor if a monitor sessions is created/deleted or change.

Is there anyway that you know of to see that detail

Everyone's tags (1)
2 REPLIES
Cisco Employee

Re: Monitor the creation of monitor sessions

What platform are you using?

You could monitor for syslog id "302013: Built {inbound|outbound} TCP connection_id..." and "302014: Teardown TCP connection id...".

If you are using an ASA then after version 8.2 you can use netflow to collect connection statistics with a neftlow collector.

I hope it helps.

PK

Community Member

Re: Monitor the creation of monitor sessions

It is on a switch ( 2960, 3560 and 3750. All IOS at most 1 year old)

I am looking basically if anyone enters "monitor session........" a syslog event is triggered

Lachlan

310
Views
0
Helpful
2
Replies
CreatePlease to create content