Reference Guide

Security | 1375
Trace List Commands
IP trace lists create an Access Control List (ACLs) to trace all traffic into the E-Series
switch. This feature is useful for tracing Denial of Service (DOS) attacks.
• clear counters ip trace-group
• deny
• deny tcp
• deny udp
• ip trace-group
• ip trace-list
• permit
• permit tcp
• permit udp
• seq
• show config
• show ip accounting trace-lists
clear counters ip trace-group
e
Erase all counters maintained for trace lists.
Syntax
clear counters ip trace-group
[trace-list-name]
Parameters
Command Modes
EXEC Privilege
deny
e
Configure a filter that drops IP packets meeting the filter criteria.
Syntax
deny
{ip | ip-protocol-number} {source mask | any | host ip-address} {destination mask | any
|
host ip-address} [count [byte]] | log] [order number]
To remove this filter, you have two choices:
• Use the
no seq sequence-number command syntax if you know the filter’s
sequence number or
Note: For other Access Control List commands, the chapter Chapter 7, Access
Control Lists (ACL).
trace-list-name
(OPTIONAL) Enter the name of a configured trace list.