Administrator Guide

Field Description
len Displays the packet’s length.
sending, rcvd,
fragment, sending
broad/multicast
proto, unroutable
The last part of each line lists the status of the packet.
TCP src= Displays the source and destination ports, the sequence number, the acknowledgement
number, and the window size of the packets in that TCP packets.
UDP src= Displays the source and destination ports for the UDP packets.
ICMP type= Displays the ICMP type and code.
IP Fragment States that it is a fragment and displays the unique number identifying the fragment
(Ident) and the oset (in 8-byte units) of this fragment (fragment oset) from the
beginning of the original datagram.
Example
IP: s=10.1.2.62 (local), d=10.1.2.206 (Ma 1/1), len 54, sending
TCP src=23, dst=40869, seq=2112994894, ack=606901739, win=8191 ACK PUSH
IP: s=10.1.2.206 (Ma 1/1), d=10.1.2.62, len 40, rcvd
TCP src=0, dst=0, seq=0, ack=0, win=0
IP: s=10.1.2.62 (local), d=10.1.2.206 (Ma 1/1), len 226, sending
TCP src=23, dst=40869, seq=2112994896, ack=606901739, win=8192 ACK PUSH
IP: s=10.1.2.216 (Ma 1/1), d=10.1.2.255, len 78, rcvd
UDP src=0, dst=0
IP: s=10.1.2.62 (local), d=10.1.2.3 (Ma 1/1), len 1500, sending fragment
IP Fragment, Ident = 4741, fragment offset = 0
ICMP type=0, code=0
IP: s=10.1.2.62 (local), d=10.1.2.3 (Ma 1/1), len 1500, sending fragment
IP Fragment, Ident = 4741, fragment offset = 1480
IP: s=40.40.40.40 (local), d=224.0.0.5 (Gi 4/11), len 64, sending broad/
multicast
proto=89
IP: s=40.40.40.40 (local), d=224.0.0.6 (Gi 4/11), len 28, sending broad/
multicast
proto=2
IP: s=0.0.0.0, d=30.30.30.30, len 100, unroutable
ICMP type=8, code=0
IP: s=0.0.0.0, d=30.30.30.30, len 100, unroutable
ICMP type=8, code=0
Usage Information
To stop packets from ooding the user terminal when debugging is turned on, use the count option.
The access-group option supports only the equal to (eq) operator in TCP ACL rules. Port operators not equal
to (
neq), greater than (gt), less than (lt), or range are not supported in access-group option (refer to the
following example). ARP packets (arp) and Ether-type (ether-type) are also not supported in the access-
group
option. The entire rule is skipped to compose the lter.
The access-group option pertains to:
• IP protocol number: from 0 to 255
• Internet control message protocol (icmp) but not the ICMP message type (from 0 to 255)
• Any internet protocol (ip)
• Transmission Control Protocol (tcp) but not on the rst, syn, or urg bits
• User Datagram Protocol (udp)
IPv4 Routing 747