Oh, so you are considering connections TO the router, not connections through the router. You must be asking about Telnet sessions (or HTTP on some routers) used for configuring or managing the router. So, in that case, use the show tcp brief command, as John suggested. Here's an example courtesy of Leigh Anne: RouterD#show tcp brief TCB Local Address Foreign Address (state) 81770CA8 172.16.1.110.23 172.16.1.1.1067 ESTAB Priscilla At 07:24 PM 8/28/01, PHIMHONGKONG wrote: >MaizeHello >Sorry I confuse all you guy > > > > > >Let say In Window xx You Put a command NETSTATS > >It will OUTPUT some thing like this > >Active Connections > > Proto Local Address Foreign Address State > TCP cx541749-a:ftp-data bb-62-5-49-77.bb.tninet.se:4227 = >TIME_WAIT > TCP cx541749-a:ftp-data bb-62-5-49-77.bb.tninet.se:4228 = >TIME_WAIT > TCP cx541749-a:ftp-data bb-62-5-49-77.bb.tninet.se:4229 = >TIME_WAIT > TCP cx541749-a:ftp-data bb-62-5-49-77.bb.tninet.se:4230 = >TIME_WAIT > TCP cx541749-a:ftp-data bb-62-5-49-77.bb.tninet.se:4231 = >TIME_WAIT > TCP cx541749-a:ftp-data c1771000-a.stcla1.sfba.home.com:2815 = >ESTABLISHE >D > TCP cx541749-a:ftp bb-62-5-49-77.bb.tninet.se:4226 = >ESTABLISHED > TCP cx541749-a:ftp c1771000-a.stcla1.sfba.home.com:2810 = >ESTABLISHE >D > TCP cx541749-a:ftp h230n3fls21o906.telia.com:65002 = >ESTABLISHED > > > >I would like to know !!!!!!1 is it possible i can do the same on router = >?????? > >If yes What command !! Thanks > >If no > >What the most closest command :-) > >Thanks > > > >IF some hacker log in to your rotuer and network ( he delete history and = >log) > >How can you know your network hacked=20 > >Thanks > >[GroupStudy.com removed an attachment of type image/gif which had a name of >amaizrul.gif] > >[GroupStudy.com removed an attachment of type image/jpeg which had a name of >Maize Bkgrd.jpg] ________________________ Priscilla Oppenheimer http://www.priscilla.com Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=17611&t=17611 -------------------------------------------------- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]