AR1220 ip accounting resetting statistics automatically

The aging time of IP accounting statistics records is 720 minutes by default. In normal cases, it should not be reset in a few minutes. Can you upload the configuration and error screenshot of ip accounting? Is there any log indicating that the accounting is reset?

Hi @Popeye_Wang. Below are the ip accounting configuration.

#
ip accounting timeout 1440
ip accounting matched-threshold 4096
ip accounting mismatched-threshold 4096
#
interface GigabitEthernet0/0/1
description LAN
ip address 10.160.3.1 255.255.255.252
ospf network-type p2p
ospf enable 1 area 0.0.0.160
ip accounting output-packets
#
<R1>display ip accounting output-packets mismatched top
Source Destination Protocol Packets Bytes Age(Unit:Min)
10.195.95.75 10.160.2.31 6 3020 4271870 644245
10.195.95.75 10.160.2.31 17 200 22894 644245
10.195.95.76 10.160.2.31 17 104 11448 644245
10.4.4.84 10.160.2.31 6 28 4040 644245
.
.
After 30 seconds...
.
.
<R1>display ip accounting output-packets mismatched top
Source Destination Protocol Packets Bytes Age(Unit:Min)
10.195.95.75 10.160.2.31 6 778 1077706 644245
10.195.95.76 10.160.2.31 17 46 5557 644245
10.195.95.75 10.160.2.31 17 41 4914 644245
10.5.71.22 10.160.2.31 6 28 4040 644245

No error or logs of ip accounting resetting.

Maybe you can reset the statistics first, then observe the result. Because the age filed for all the sessions is the same.

Hi. Thanks for your reply.

Yes we had already tried to reset the statistics to no avail. In fact, we removed and reconfigured the IP accounting configuration, but the output is still getting reset automatically.

Are you doing any info-center ? If not can you please try to get the information by "debugging" you can enable, debugging ip packet" and then "terminal monitor" (which is allowed by default until you do not stop) and "terminal debugging".

Once you apply above you will get the output that what actually happening with it. Appreciate if you can share the output for same and if you cannot do it on live network then I prefer you share the "display diagnostic-information" output to diagnose further here otherwise you can refer the same to TAC if you have hi-care for device .

Thank you.

Kindest regards,
Uzair

thanks!

Good