https://community.extremenetworks.com/t5/extremeswitching-other/is-there-any-possiblity-to-check-the-dropped-packets/m-p/12422#M3450 Is there any possibility to check the dropped packets based on the access rule we have written? <BR /> <BR /> Actual scenario is, We are facing the issue in our network because huge volume of mDNS multicast packets. So, We trying to block the mDNS multicast packets using the following Policy file.<BR /> <BR /> entry block_IPv4mDNS{<BR /> if match all {<BR /> destination-address 224.0.0.251/32 ;<BR /> }<BR /> then {<BR /> deny;<BR /> count ipv4mDNSdeny ;<BR /> }<BR /> }<BR /> <BR /> So, Is there any way to check whether these packets are blocked? If possible, Please share.<BR /> <BR /> Thanks<BR /> <BR /> Wed, 22 Feb 2017 20:28:00 GMT Thavamani_Shanm 2017-02-22T20:28:00Z https://community.extremenetworks.com/t5/extremeswitching-other/is-there-any-possiblity-to-check-the-dropped-packets/m-p/12422#M3450 Is there any possibility to check the dropped packets based on the access rule we have written? <BR /> <BR /> Actual scenario is, We are facing the issue in our network because huge volume of mDNS multicast packets. So, We trying to block the mDNS multicast packets using the following Policy file.<BR /> <BR /> entry block_IPv4mDNS{<BR /> if match all {<BR /> destination-address 224.0.0.251/32 ;<BR /> }<BR /> then {<BR /> deny;<BR /> count ipv4mDNSdeny ;<BR /> }<BR /> }<BR /> <BR /> So, Is there any way to check whether these packets are blocked? If possible, Please share.<BR /> <BR /> Thanks<BR /> <BR /> Wed, 22 Feb 2017 20:28:00 GMT https://community.extremenetworks.com/t5/extremeswitching-other/is-there-any-possiblity-to-check-the-dropped-packets/m-p/12422#M3450 Thavamani_Shanm 2017-02-22T20:28:00Z https://community.extremenetworks.com/t5/extremeswitching-other/is-there-any-possiblity-to-check-the-dropped-packets/m-p/12423#M3451 Show access-list counter would show how many packets are blocked. Wed, 22 Feb 2017 20:36:00 GMT https://community.extremenetworks.com/t5/extremeswitching-other/is-there-any-possiblity-to-check-the-dropped-packets/m-p/12423#M3451 OscarK 2017-02-22T20:36:00Z https://community.extremenetworks.com/t5/extremeswitching-other/is-there-any-possiblity-to-check-the-dropped-packets/m-p/12424#M3452 You could did a mirror action in the ACL. Then you could plug a PC in to see the traffic. <BR /> Wed, 22 Feb 2017 21:07:00 GMT https://community.extremenetworks.com/t5/extremeswitching-other/is-there-any-possiblity-to-check-the-dropped-packets/m-p/12424#M3452 StephenW 2017-02-22T21:07:00Z https://community.extremenetworks.com/t5/extremeswitching-other/is-there-any-possiblity-to-check-the-dropped-packets/m-p/12425#M3453 or log them to the log using this article.<BR /> <A href="https://gtacknowledge.extremenetworks.com/articles/How_To/How-to-Capture-received-packets-using-an-ACL-and-log-the-packet-header-to-the-show-log-output" target="_blank" rel="nofollow noreferrer noopener">https://gtacknowledge.extremenetworks.com/articles/How_To/How-to-Capture-received-packets-using-an-A...</A><BR /> <BR /> Wed, 22 Feb 2017 21:11:00 GMT https://community.extremenetworks.com/t5/extremeswitching-other/is-there-any-possiblity-to-check-the-dropped-packets/m-p/12425#M3453 OscarK 2017-02-22T21:11:00Z