Sunteți pe pagina 1din 2

DEBUG FLOW DATA COLLECTION Please follow the below mentioned procedure for obtaining the logs.

Log onto the device via the CLI GET CONSOLE - Look at the Page size. It should read something like 22/22 SET CONSOLE PAGE 0 - This will set the console to not pause at each page full. UNDEBUG ALL -we are assuring that the debug utility is not already running. just to be safe. GET FFILTER -we would expect to get no response. This tells us we have not set up any flow filters as of yet. If you should see filters listed you can delete them with UNSET FFILTER for each filter. SET FFILTER SRC-IP x.x.x.x () DST-IP x.x.x.x () SET FFILTER SRC-IP x.x.x.x () DST-IP x.x.x.x () by doing this we can observe the packets flowing in each direction and where any possible problems may be. Basically we want to define the end points of communication. CLEAR DB - this will clear the debugging cache. DEBUG FLOW BASIC -this turns the debugging utility on. Initiate the traffic from the source pc UNDEBUG ALL -turns the utility back off. GET DB STREAM -this is the actual packet capture that we want. UNSET FFILTER -this will need to be done twice, once for each filter that we set up earlier. CLEAR DB -this will clear the cache. SET CONSOLE PAGE 22 - This will set the console page back to where it was. Replace the 22 with whatever you noted from step 2. Save the CLI session log and attach it to the case or send it to me via email.

SNOOP DATA COLLECTION SNOOP INFO - Shows the existing snoop settings like the snoop detail status , the snoop filters configured , the detail length( for sniffer viewing purpose) SNOOP DETAIL Hit the return key, this will start the Snoop detail feature which we can copy and convert to a Wireshark viewable format. SNOOP DETAIL LEN 1514 Will capture the entire packets. SNOOP FILTER IP SRC-IP <x.x.x.x> DST-IP <y.y.y.y> Sets the filter to capture bidirectional traffic for the ips specified SNOOP FILTER IP SRC-IP <y.y.y.y> DST-IP <x.x.x.x> SNOOP - type in this and hit the return key it will ask for confirmation to start snoop press 'Y' CLEAR DB - this clears the debug cache.

Initiate the traffic to destination let it fail for at least 4 packets Press Esc to turn off the snoop GET DB STR - gets the required output on to the screen, save it locally SNOOP FILTER DELETE - deletes the snoop filters configured

S-ar putea să vă placă și