logging 1.2.3.5
logging buffered 10000 debugging
logging trap debugging

access-list 101 permit tcp any host 1.2.3.4 eq 23 syn log
access-list 101 permit ip any any

interface fast0/0
ip access-group 101 in


This config snippet will log all port 23 connects to host 1.2.3.4 which
should be an interface on your local router. You'll have to make a rule to
match and log each interface on your router for this to match all possible
paths to your router.  The logging  global config command sends
syslog messages to a syslog server (There are daemons for WinNT).

You can set up a crontab on a Unix server to grep the syslog for
IPACCESSLOGP and mail this output to yourself for a more complete solution.

In Windows a Windows Scripting Host script, or Perl for Windows script can
be created to the same effect.

Caveats:

Input access lists break certain flow enhancement features in certain
routers, I'd suggest you fully research the impact an input access list will
have on your router before implementing this.

Every interface on your router would need to have the first rule in the
above access list changed to its respective network layer address (1.2.3.4)
in this case.

Wayne

-----Original Message-----
From: Bolton, Travis [mailto:[EMAIL PROTECTED]] 
Sent: Wednesday, August 29, 2001 7:33 AM
To: [EMAIL PROTECTED]
Subject: RE: I HAVE QUESTION How can i know who conn to my rout [7:17585]

"Show arp" will show you all the IP's on the router with their MAC
addresses.  Hope this is what you want.

-----Original Message-----
From: PHIMHONGKONG [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, August 28, 2001 5:14 PM
To: [EMAIL PROTECTED]
Subject: Re: I HAVE QUESTION How can i know who conn to my rout
[7:17581]


but those command is only show you a telnet session or soem one currently
log in router

i would like to kow the command like show all ip connecting to the router

Thanks all
""Shojayi Joe""  wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> Try a
> router> show sessions
>
> show sessions is the command




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=17608&t=17608
--------------------------------------------------
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Reply via email to