HP Comware 5 Debug Manual Vol 2
Thread 29, tcp packet is permitted from trust to untrust: (192.168.144.2
1618)->(10.0.144.1 21), 48 bytes, ACL none.
// Packet filter permitted a TCP packets from trust zone to untrust zone. No ACL is applied between the
zones.
# Enable debugging for UDP packet filtering on the device with firewall enabled.
<Sysname> debugging firewall packet-filter udp
*May 31 12:19:39:710 2006 Sysname DPFILTER/7/debug:
Thread 15, udp packet is permitted from trust to untrust: (192.168.144.2
1619)->(10.0.144.1 69), 47 bytes, ACL 6000.
// Packet filter permitted a UDP packets from trust zone to untrust zone. ACL 6000 is applied between
the zones.
# Enable debugging for ICMP packet filtering on a firewall-enabled device.
<Sysname> debugging firewall packet-filter icmp
*May 31 12:14:17:337 2006 Sysname DPFILTER/7/debug:
Thread 30, icmp packet is permitted from trust to untrust: (192.168.144.2)->(10.0.144.1),
60 bytes, ACL none.
// Packet filter permitted an ICMP packets from trust zone to untrust zone. No ACL is applied between
the zones.
debugging firewall ipv6
Use debugging firewall ipv6 to enable debugging for IPv6 firewall.
Use undo debugging firewall ipv6 to disable debugging for IPv6 firewall.
Syntax
debugging firewall ipv6 { all | icmpv6 | others | tcp | udp } [ interface interface-type interface-number ]
undo debugging firewall ipv6 { all | icmpv6 | others | tcp | udp } [ interface interface-type
interface-number ]
Default
No debugging is enabled for ipv6 firewall.
Views
User view
Default command level
1: Monitor level
Parameters
all: Specifies all types of debugging for firewall.
Icmpv6: Specifies debugging for ICMPv6 packet filtering.
others: Specifies debugging for packet filtering of protocols other than ICMPv6, TCP, and UDP.
tcp: Specifies debugging for TCP packet filtering.
udp: Specifies debugging for UDP packet filtering.
interface interface-type interface-number: Specifies an interface by its type and number. If this keyword
is not specified, the command applies to all interfaces.
53