Check interface open ip accounting by command "show run"
If interface open this function get "ip accounting output-packets"
Router#conf t <-- config terminal
Enter configuration commands, one per line. End with CNTL/Z.
Router(config)#int s0/1 <-----config interface to open ip accounting
Router(config-if)#no ip acco <------ turn off ip accounting for reset packets counter.
Router(config-if)#exit <--- exit from interface
Router(config)#exit <---- exit from config terminal
Router#sh ip acco <---- check this. should not see any result.
Router#conf t <----re-config ip account by config terminal again.
Enter configuration commands, one per line. End with CNTL/Z.
Router(config)#int s0/1 <---- config interface to open ip accounting
Router(config-if)#ip acco <---- turn on ip accounting
Router#sh ip acco <---- show ip accounting. may have get packets counter to monitor.
Source Destination Packets Bytes
192.168.1.205 192.168.5.157 45 8656
192.168.1.205 192.168.5.13 22 2050
192.168.1.205 192.168.5.4 38 3487
192.168.1.205 192.168.5.7 21 13443
192.168.1.205 192.168.5.16 1 42
192.168.1.205 192.168.5.23 1 42
192.168.1.205 192.168.5.59 22 7697