Administrator Guide

Version Description
6.3.1.0 Added the count option.
Usage Information The following describes the debug ip packet command in the following example.
Field Description
s= Lists the source address of the packet and the name of the interface (in parentheses)
that received the packet.
d= Lists the destination address of the packet and the name of the interface (in
parentheses) through which the packet is being sent out on the network.
len Displays the packet’s length.
sending, rcvd,
fragment, sending
broad/multicast
proto, unroutable
The last part of each line lists the status of the packet.
TCP src= Displays the source and destination ports, the sequence number, the acknowledgement
number, and the window size of the packets in that TCP packets.
UDP src= Displays the source and destination ports for the UDP packets.
ICMP type= Displays the ICMP type and code.
IP Fragment States that it is a fragment and displays the unique number identifying the fragment
(Ident) and the offset (in 8-byte units) of this fragment (fragment offset) from the
beginning of the original datagram.
Example
IP: s=10.1.2.62 (local), d=10.1.2.206 (Ma 1/1), len 54, sending
TCP src=23, dst=40869, seq=2112994894, ack=606901739, win=8191 ACK PUSH
IP: s=10.1.2.206 (Ma 1/1), d=10.1.2.62, len 40, rcvd
TCP src=0, dst=0, seq=0, ack=0, win=0
IP: s=10.1.2.62 (local), d=10.1.2.206 (Ma 1/1), len 226, sending
TCP src=23, dst=40869, seq=2112994896, ack=606901739, win=8192 ACK PUSH
IP: s=10.1.2.216 (Ma 1/1), d=10.1.2.255, len 78, rcvd
UDP src=0, dst=0
IP: s=10.1.2.62 (local), d=10.1.2.3 (Ma 1/1), len 1500, sending fragment
IP Fragment, Ident = 4741, fragment offset = 0
ICMP type=0, code=0
IP: s=10.1.2.62 (local), d=10.1.2.3 (Ma 1/1), len 1500, sending fragment
IP Fragment, Ident = 4741, fragment offset = 1480
IP: s=40.40.40.40 (local), d=224.0.0.5 (Te 4/11/1), len 64, sending broad/
multicast
proto=89
IP: s=40.40.40.40 (local), d=224.0.0.6 (Te 4/11/1), len 28, sending broad/
multicast
proto=2
IP: s=0.0.0.0, d=30.30.30.30, len 100, unroutable
ICMP type=8, code=0
IP: s=0.0.0.0, d=30.30.30.30, len 100, unroutable
ICMP type=8, code=0
Usage Information
To stop packets from flooding the user terminal when debugging is turned on, use the count option.
The access-group option supports only the equal to (eq) operator in TCP ACL rules. Port operators not equal
to (neq), greater than (gt), less than (lt), or range are not supported in access-group option (refer to the
following example). ARP packets (
arp) and Ether-type (ether-type) are also not supported in the access-
group option. The entire rule is skipped to compose the filter.
The access-group option pertains to:
• IP protocol number: from 0 to 255
•
Internet control message protocol (icmp) but not the ICMP message type (from 0 to 255)
• Any internet protocol (ip)
IPv4 Routing 717