Anyone here a big fan of the show pipe features
At the end of show <command>, use the pipe character '|' followed by:
begin|include|exclude|grep [-v] <regular_exp>, to filter show output.
Very useful if you have large object-groups and only want to list ACL entries related to that object group since the PIX will display them all as 1 line number
a show access-list | grep line 2 permit tcp
will display only the entries that are part of "line 2 permit tcp"
or
show access-list | grep (hitcnt=0)
will only display unused ACLs, useful for housecleaning.
show access-list | exclude (hitcnt=0)
will only display ACLS with hits
Also useful for viewing connection issues like
show conn | grep saA
show conn | 10.10.30.50
