Juniper E Series

JUNOSe 7.2.x Policy Management Configuration Guide
188 ! Monitoring Packet Mirroring
show ip mirror interface
! Use to display CLI-based packet mirroring configuration information for a
specific interface or for all interfaces on which mirroring is enabled.
! Field descriptions
! Interface—Interface being mirrored
! Analyzer Port—Interface to which the mirrored traffic is sent, and that then
sends the traffic to the analyzer device
! Analyzer next-hop—IP address of the next hop to the analyzer device;
displayed when the analyzer port is a shared medium
! Example
host1#show ip mirror interface atm 5/0.1
Interface Analyzer Port Analyzer next-hop
------------------- ------------------- ---------------------
ATM5/0.1 FastEthernet3/0 192.168.1.1
show mirror log
! Use to display failure messages and information for secure policies.
! This command and the output are visible only to authorized users—the
mirror-enable command must be enabled prior to using this command.
! All normal E-series system log messages are suppressed for packet
mirroring-related policy operations.
! Field descriptions
! Time—Day, date, and time of failure
! Mirror-ID—Unique identifier of the mirrored session
! Session-ID—Unique identifier of the user session
! User—User login name
! Error Status—Description of error condition
! Example
host1#show mirror log
Time Mirror-ID Session-ID User Error Status
----------- ---------------- ---------- ---------- ----------------------
TUE FEB 03 8976 1923 suresh@aol no secure polic
2004 18:35 .com ies available
:43 UTC
TUE FEB 03 8976 1924 219040@aol out of memory
2004 18:35 .com
:39 UTC
TUE FEB 03 8976 1924 not applic analyzer 1.1.1.1 is unr
:30 UTC able eachble in virtual rou
ter default
NOTE: This command is deprecated and might be removed completely in a future
release. The function provided by this command has been replaced by the show
secure policy-list command.