show users only displays exec sessions, while show tcp brief shows all tcp connections terminating on the router. This would include dlsw peer connections, telnet sessions, tn3270 connections, ftp, etc. There are all sorts of things that will show up in a show tcp brief that will not show up in show users. Regards, John | I believe another command would also accomplish the same thing, correct me | if I'm wrong : | | show users | | Donny | | | >From: "Priscilla Oppenheimer" | >Reply-To: "Priscilla Oppenheimer" | >To: [EMAIL PROTECTED] | >Subject: Re: I HAVE QUESTION How can i know who conn to my rout [7:17611] | >Date: Tue, 28 Aug 2001 22:08:17 -0400 | > | >Oh, so you are considering connections TO the router, not connections | >through the router. You must be asking about Telnet sessions (or HTTP on | >some routers) used for configuring or managing the router. | > | >So, in that case, use the show tcp brief command, as John suggested. | > | >Here's an example courtesy of Leigh Anne: | > | >RouterD#show tcp brief | >TCB Local Address Foreign Address (state) | >81770CA8 172.16.1.110.23 172.16.1.1.1067 ESTAB | > | >Priscilla | > | >At 07:24 PM 8/28/01, PHIMHONGKONG wrote: | > >MaizeHello | > >Sorry I confuse all you guy | > > | > > | > > | > > | > > | > >Let say In Window xx You Put a command NETSTATS | > > | > >It will OUTPUT some thing like this | > > | > >Active Connections | > > | > > Proto Local Address Foreign Address State | > > TCP cx541749-a:ftp-data bb-62-5-49-77.bb.tninet.se:4227 = | > >TIME_WAIT | > > TCP cx541749-a:ftp-data bb-62-5-49-77.bb.tninet.se:4228 = | > >TIME_WAIT | > > TCP cx541749-a:ftp-data bb-62-5-49-77.bb.tninet.se:4229 = | > >TIME_WAIT | > > TCP cx541749-a:ftp-data bb-62-5-49-77.bb.tninet.se:4230 = | > >TIME_WAIT | > > TCP cx541749-a:ftp-data bb-62-5-49-77.bb.tninet.se:4231 = | > >TIME_WAIT | > > TCP cx541749-a:ftp-data c1771000-a.stcla1.sfba.home.com:2815 = | > >ESTABLISHE | > >D | > > TCP cx541749-a:ftp bb-62-5-49-77.bb.tninet.se:4226 = | > >ESTABLISHED | > > TCP cx541749-a:ftp c1771000-a.stcla1.sfba.home.com:2810 = | > >ESTABLISHE | > >D | > > TCP cx541749-a:ftp h230n3fls21o906.telia.com:65002 = | > >ESTABLISHED | > > | > > | > > | > >I would like to know !!!!!!1 is it possible i can do the same on router = | > >?????? | > > | > >If yes What command !! Thanks | > > | > >If no | > > | > >What the most closest command :-) | > > | > >Thanks | > > | > > | > > | > >IF some hacker log in to your rotuer and network ( he delete history and | >= | > >log) | > > | > >How can you know your network hacked=20 | > > | > >Thanks | > > | > >[GroupStudy.com removed an attachment of type image/gif which had a name | >of | > >amaizrul.gif] | > > | > >[GroupStudy.com removed an attachment of type image/jpeg which had a name | >of | > >Maize Bkgrd.jpg] | >________________________ | > | >Priscilla Oppenheimer | >http://www.priscilla.com | _________________________________________________________________ | Get your FREE download of MSN Explorer at http://explorer.msn.com/intl.asp | | | | _______________________________________________________ Send a cool gift with your E-Card http://www.bluemountain.com/giftcenter/ Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=17623&t=17623 -------------------------------------------------- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
