HP Comware 5 Debug Manual Vol 2

Default
Debugging for firewall is disabled.
Views
User view
Default command level
1: Monitor level
Parameters
all: Specifies all types of debugging for firewall.
eff: Specifies debugging for Ethernet frame filtering. Only single-core device supports this keyword.
dlsw: Specifies debugging for DLSw. Only single-core device supports this keyword.
fragments-inspect: Specifies debugging for fragment inspection. Only single-core device supports this
keyword.
events: Specifies debugging for fragment inspection events. Only single-core device supports this
keyword.
others: Specifies debugging for packet filtering of other protocols except ICMP, TCP, and UDP.
icmp: Specifies debugging for ICMP packet filtering.
tcp: Specifies debugging for TCP packet filtering.
udp: Specifies debugging for UDP packet filtering.
interface interface-type interface-number: Specifies an interface by its type and number. If this keyword
is not specified, the command applies to all interfaces.
Usage guidelines
Table 1 describes output fields and messages for the debugging firewall eff command.
Table 34 Output from the debugging firewall eff command
Field
Description
List listNumber: RuleNumber ACL listNumber and matching rule RuleNumber used in firewall filtering.
type Layer 2 protocol type of Ethernet frame.
cos DOT1P priority in VLAN tag of Ethernet frame.
lsap Encapsulation format of data frame.
Table 2 describes output fields and messages for the debugging firewall fragments-inspect command.
Table 35 Output from the debugging firewall fragments-inspect command
Field
Description
protocol prop Protocol type.
Table 3 describes output fields and messages for the debugging firewall icmp command.
Table 36 Output from the debugging firewall icmp command (only supported by single-core device)
Field
Description
InBound Filters incoming packets.
49