HP Comware 5 Debug Manual Vol 2

# Enable debugging for packet filtering. Output similar to the following example is generated when an
ICMP error packet is to be sent through Ethernet 1/1 under the following conditions:
•
ASPF is enabled on the device.
•
An ASPF policy configured to drop ICMP error packets is applied to Ethernet 1/1.
•
The device acts as a middle node of a route.
<Sysname> debugging aspf packet
*May 31 12:31:59:22 2006 Sysname DPASPF/7/debug:
Thread 30, outbound icmp-err packet on the interface Ethernet1/1, and is denied by ASPF:
(192.168.144.2)->(10.0.144.1), 56 bytes.
// ASPF dropped the ICMP error packets on Ethernet 1/1.
# Enable debugging for packet filtering. Output similar to the following example is generated when the
first TCP packet of a connection arrives at Ethernet 1/1 under the following conditions:
•
ASPF is enabled on the device.
•
An ASPF policy is applied to Ethernet 1/1. The policy is configured to drop the first packet of a
connection if it is not the SYN packet.
•
The device is the intermediate router for the FTP connection.
•
The arriving TCP packet is not a SYN packet.
<Sysname> debugging aspf packet
*May 31 12:34:16:584 2006 Sysname DPASPF/7/debug:
Thread 29, the inbound first packet of tcp-conn on the interface Ethernet1/1 isn`t syn,
and is denied by ASPF: (192.168.144.2)->(10.0.144.1), 52 bytes.
// ASPF dropped the packet on Ethernet 1/1 because the packet is not a SYN packet.
63