Ok, Thanks, now I got it. This means that any other traffic than from 5.5.5.5 will only have a maximum of 50 entries... I've got the good result...
R4#sh ip accounting Source Destination Packets Bytes 2.2.2.2 5.5.5.5 55 2657 5.5.5.5 2.2.2.2 73 3122 6.6.6.6 150.50.24.1 24 2400 150.50.24.1 6.6.6.6 25 2500 Accounting data age is 4 Regards... 2009/5/4 Tyson Scott <[email protected]> > Willians, > > > > > http://www.cisco.com/en/US/docs/ios/ipapp/command/reference/iap_i1.html#wp1052220 > > > > Transit entries are those that do not match any of the filters specified by > ip accounting-list global configuration commands. If no filters are defined, > no transit entries are possible. > > > > To maintain accurate accounting totals, the Cisco IOS software maintains > two accounting databases: an active and a checkpointed database. > > > > What you are seeing below is correct. Sorry I had to look back at the > question to remember what the question asked. > > > > The Transit table is what is not kept. > > > > Regards, > > > > Tyson Scott - CCIE #13513 R&S and Security > > Technical Instructor - IPexpert, Inc. > > > Telephone: +1.810.326.1444 > Cell: +1.248.504.7309 > Fax: +1.810.454.0130 > Mailto: [email protected] > > > > Join our free online support and peer group communities: > http://www.IPexpert.com/communities <http://www.ipexpert.com/communities> > > > > IPexpert - The Global Leader in Self-Study, Classroom-Based, Video On > Demand and Audio Certification Training Tools for the Cisco CCIE R&S Lab, > CCIE Security Lab, CCIE Service Provider Lab , CCIE Voice Lab and CCIE > Storage Lab Certifications. > > > > *From:* [email protected] [mailto: > [email protected]] *On Behalf Of *Willians Barboza > *Sent:* Monday, May 04, 2009 8:50 PM > *To:* [email protected] > *Subject:* [OSL | CCIE_Security] Fwd: IP accounting > > > > Indeed I was trying using dynamips... Now I am trying at Cisco Partner > E-learning connection... Using the topology for the following lab "SNRS - > Configure a DMVPN" > > > > ip accounting-threshold 500 > ip accounting-list 172.31.235.93 0.0.0.0 > ip accounting-transits 50 > > > > interface FastEthernet0/0 > ip address 10.1.1.1 255.255.255.0 > > ip accounting output-packets > ip accounting precedence input > duplex auto > speed auto > ! > interface FastEthernet0/1 > ip address 172.31.235.21 255.255.255.0 > > ip accounting output-packets > ip accounting precedence input > duplex auto > speed auto > > So i tryind to ping 10.1.1.3, which is behind this router from 2 different > IP addresses. However, it accounts for both addresses > > > > Central_site#sh ip accounting > Source Destination Packets Bytes > 10.1.1.3 172.31.235.93 4 400 > 172.31.235.93 10.1.1.3 4 400 > 10.1.1.3 172.31.235.55 4 400 > 172.31.235.55 10.1.1.3 4 400 > > Accounting data age is 4 > > > > And this is the version used > > Cisco IOS Software, 2800 Software (C2800NM-ADVIPSERVICESK9-M), Version > 12.4(15)T, RELEASE SOFTWARE (fc3) > > > > Then, I checked the Cisco documentation and it states exactly the opposite. > The ip accounting-list is used to configure the hosts for which accounting > information will be kept. > > > http://www.cisco.com/en/US/docs/ios/ipapp/command/reference/iap_i1.html#wp1051784 > > The following example adds all hosts with IP addresses beginning with > 192.31 to the list of hosts for which accounting information will be kept: > > ip accounting-list 192.31.0.0 0.0.255.255 > > > > Anyways, it didn't work either... > > > > > > 2009/5/4 Tyson Scott <[email protected]> > > > > Are you using dynamips? If so don’t always expect the same results. > Sometimes it has quirks. > > > > Regards, > > > > Tyson Scott - CCIE #13513 R&S and Security > > Technical Instructor - IPexpert, Inc. > > > Telephone: +1.810.326.1444 > Cell: +1.248.504.7309 > Fax: +1.810.454.0130 > Mailto: [email protected] > > > > Join our free online support and peer group communities: > http://www.IPexpert.com/communities <http://www.ipexpert.com/communities> > > > > IPexpert - The Global Leader in Self-Study, Classroom-Based, Video On > Demand and Audio Certification Training Tools for the Cisco CCIE R&S Lab, > CCIE Security Lab, CCIE Service Provider Lab , CCIE Voice Lab and CCIE > Storage Lab Certifications. > > > > *From:* [email protected] [mailto: > [email protected]] *On Behalf Of *Willians Barboza > *Sent:* Monday, May 04, 2009 7:51 PM > *To:* OSL Security > *Subject:* [OSL | CCIE_Security] IP accounting > > > > Hi all, > > > > I am trying do do lab6 for V3 and I got stuck in this question. First of > all, I am using the following IOS version: > > > > 3700 Software (C3745-ADVENTERPRISEK9-M), Version 12.4(15)T8, RELEASE > SOFTWARE (fc3) > > > > I confgured the following as stated in the proctor guide. (I just changed > the serial interface) > > > > ip accounting-threshold 500 > ip accounting-list 5.5.5.5 0.0.0.0 > ip accounting-transits 50 > > > Serial0/0.6 > > ip accounting output-packets > ip accounting precedence input > > FastEthernet0/1 > ip accounting output-packets > ip accounting precedence input > > > > however, whenever I try to check the show ip accounting command, the host > 5.5.5.5 is still shown. > > > > R4#sh ip accounting > Source Destination Packets Bytes > 2.2.2.2 6.6.6.6 7 672 > 6.6.6.6 2.2.2.2 7 672 > 2.2.2.2 5.5.5.5 105 10480 > 5.5.5.5 2.2.2.2 105 10480 > > Accounting data age is 10 > > > > Any guesses?? > > > > >
