HP Comware 5 Debug Manual Vol 2

•
display aspf session
•
display aspf interface
debugging aspf packet
Use debugging aspf packet to enable debugging for ASPF packet filtering.
Use undo debugging aspf packet to disable debugging for ASPF packet filtering.
Syntax
debugging aspf packet
undo debugging aspf packet
Default
Debugging for ASPF packet filtering is disabled.
Views
User view
Default command level
1: Monitor level
Usage guidelines
Table 21 describes output fields and messages for the debugging aspf packet command.
Table 54 Output from the debugging aspf packet command
Field
Description
Thread Virtual CPU number.
tcp-conn TCP connection.
icmp-err ICMP error packet.
inbound Filters incoming packets.
outbound Filters packets to be sent.
interface Interface that filters packets.
from A to B The source zone is A, and the destination zone is B.
(Src-ip)->(Des-ip) Source IP address and destination IP address.
Examples
# Enable debugging for packet filtering. Output similar to the following example is generated under the
following conditions:
•
ASPF is enabled on the device.
•
The device is an intermediate router for an FTP connection.
<Sysname> debugging aspf packet
Jul 25 14:49:14:411 2007 Sysname DPASPF/7/debug:
Thread 31,child session is found, and the inbound packet on the interface Ethernet1/1 is
permitted: (10.0.144.1)->(192.168.144.1), 46 bytes.
// ASPF permitted an incoming packet on Ethernet 1/1 because the packet belongs to a child session.
62