Solved

Hitcount meaning in ASA Firewall

Posted on 2011-09-21
4
2,205 Views
Last Modified: 2012-05-12
What is the Hitcount meaning in ASA access-lists concept

Ex : NEW-TCL-ILL-FW# sh access-list Outlist-11-MAR-11 121.242.X.X | i 115.111.22$
access-list Outlist-11-MAR-11 line 108 extended permit ip any host 115.X.X.X (hitcnt=13) 0xaad9b9b1

I am not able to PING to 115.111.X.X from Internet but the hitcount is increasing,what does it means

Regards
ramu
0
Comment
Question by:RAMU CH
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
  • 2
4 Comments
 
LVL 5

Assisted Solution

by:Alexey Komarov
Alexey Komarov earned 500 total points
ID: 36572612
Hi
try permit icmp
access-list Outlist-11-MAR-11 line 108 extended permit icmp any host 115.X.X.X
0
 
LVL 1

Author Comment

by:RAMU CH
ID: 36572754
Thanks for the reply..

What is basic concept of hitcount

Regards
ramu
0
 
LVL 5

Accepted Solution

by:
Alexey Komarov earned 500 total points
ID: 36572841
When a packet is matched against an ACE, the security appliance increments the hitcnt (hit count) counter by one.
0
 
LVL 1

Author Closing Comment

by:RAMU CH
ID: 36922422
Thanks
0

Featured Post

Free Tool: ZipGrep

ZipGrep is a utility that can list and search zip (.war, .ear, .jar, etc) archives for text patterns, without the need to extract the archive's contents.

One of a set of tools we're offering as a way to say thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Cisco Pix/ASA hairpinning The term, hairpinning, comes from the fact that the traffic comes from one source into a router or similar device, makes a U-turn, and goes back the same way it came. Visualize this and you will see something that looks …
For months I had no idea how to 'discover' the IP address of the other end of a link (without asking someone who knows), and it drove me batty. Think about it. You can't use Cisco Discovery Protocol (CDP) because it's not implemented on the ASAs.…
Both in life and business – not all partnerships are created equal. As the demand for cloud services increases, so do the number of self-proclaimed cloud partners. Asking the right questions up front in the partnership, will enable both parties …
As a trusted technology advisor to your customers you are likely getting the daily question of, ‘should I put this in the cloud?’ As customer demands for cloud services increases, companies will see a shift from traditional buying patterns to new…

735 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question