日志开启及导出分析
路由器:
logging trap warnings
logging facility local4
logging source-interface Loopback1
logging host 172.29.12.86
snmp-server community easnmp RO
snmp-server contact hu.li@eascs.com
snmp-server enable traps
snmp-server host 172.29.12.86 easnmp
ASA:
logging enable
logging timestamp
logging trap errors
logging asdm warnings
logging facility 21
logging device-id hostname
logging host DMZ 172.29.12.86
logging permit-hostdown
nat日志导出
sh ip nat translations | redirect tftp://172.16.186.14/pub/dlcnc2018.log
cat dlnatcnc.log | grep 124.93.112.32 | awk '{print $3}' | awk -F : '{print $1}' | sort | uniq >> dlcnc2018.log
交换接口流量及包数查询
sh int | in input.*bits|(Gig|Vlan).*up