I'm not 100% sure about your question. If you want to monitor someone who try to access to somewhere through 2800 router I just recommend you using the netflow.you can know what are udp/tcp ports that users(IP addresses) use.
you can try enabling netflow in your router to check up the top user whos having high transactions.
you need to configure ip route-cache flow under the ethernet interface once you have done the same you can check/verify the transactions using show ip cache flow command this will give you details of source/destination ip address as well port number details with packet counts.
this will help you to identify which ip's are having are involved in more number of transactions.
If you have a good knowledge of *nix you can use NetFlow and export it to a machine to process it with flow-tools. There is also "ntop" a freeware that can give you the information you are looking for. This last one can either receive NetFlow or capture and classify packets and give you very nice graphs with the information you are looking for.
Question We run asr9001 with XR 6.1.3, and we have a very long delay to
login w/ SSH 1 or 2 to the device compare to IOS device. After
investigation, the there is 1s delay between the client KEXDH_INIT and
the server (XR) KEXDH_REPLY. After debug ssh serv...
Introduction The purpose of this document is to demonstrate the Open
Shortest Path First (OSPF) behavior when the V-bit (Virtual-link bit) is
present in a non-backbone area. The V-bit is signaled in Type-1 LSA only
if the router is the endpoint of one or ...
Hi, I am seeing quite a few issues with patch install and wanted to
share my experience and workaround to this. Login to admin via CLI, then
access root with the “shell” command Issue “df –h” and you’ll probably
see the following directory full or nearly ...