Hi,
I am trying to find documentation on utilizing the packet-capture and debug commands from the CLI for the mentioned switch.
Can anyone help point me in the right direction? I'm trying to debug SNMP trap collection.
Hi @networkeng1168
I believe there is not support pcap capabilities on ICX. We do have a dm raw utility, this will only capture packets hitting (arriving or transmitting) at the time on the unit
CX7150-48P Router#show who ( verify the connection )ICX7150-48P Router#debug destination( Where you want to see the packets)all Send debug message to all destinationsconsole Send debug message to consolelogging Defaultssh Send debug message to SSH sessiontelnet Send debug message to telnet session
ICX7150-48P Router#dm raw mode briefICX7150-48P Router#dm raw max 100ICX7150-48P Router#dm rawRaw packet debugging is on now
Video Link as reference https://www.youtube.com/watch?v=6a18tpkE_y4
You can also do a port mirror on the interface if you want to take a look at any specific interface
Standalone(config)#mirror-port ethernet 1/1/x (WHERE IS THE PC CONNECTED)Standalone(config)#interface ethernet 1/2/5 or 2/2/5 ( INTERFACE THAT WE WANT TO CAPTURE)Standalone(config-if-e1000-1/1/3)#monitor ethernet 1/1/x ( WHERE IS TE PC CONNECTED)Standalone(config-if-e1000-1/1/3)#exiStandalone(config)#show mirrror
Guide:http://www.netadmin.us/docs/Port-Monitoring.pdf
Also RSPAN for any port destination mirroring
Guide:https://docs.commscope.com/bundle/fastiron-08090-commandref/page/GUID-2AD31709-F27B-4C8C-8AE9-A40633F6AF93.html
Video link: https://www.youtube.com/watch?v=yi9uQR6jYmw
I hope I've been helpful
Hi thank you.
Can the dw command help us debug snmp traps?
Hello,
You can for sure debug SNMP traps using 'dm raw'Apply 'dm raw fil 1 dpa <trap-receiver-ip_address>'This will show if there are any traps been sent towards the destination.You see some UDP packets going out the trap receiver every time you do 'config t' and then 'exit' as this will trigger a trap call 'configuration was potentially changed'.Let me check your SNMP configuration to verify the trap has been correctly configured.
Hi, thank you, do you know where I can find more documentation on using the dm raw utility?
Hi!'dm' stands for 'diagnostic mode'. This is a series of commands reserved for TAC usage, so they are not public. I can still share some knowledge with you, though.
'debug destination' will help you print the output of 'dm raw' into the appropriate session.
If you have a stack and you want to print the output in console, make sure you're connected to the console port of the active controller.
'show who' will show you what is the session you're connecting to, to which you should print your output.
'dm raw ?' will give you the possible options as send/receive/exclude management port/ and filters.
'dm raw filter 1' can be used many times with different filters and this will apply as an 'AND'.
If you want to filter with 'OR' you can use filters 2, 3, and 4.
'dm raw filter none' will clear de filters.
The same 'dm raw' command is used to start as well as to stop the printing.
'dm raw' will only capture traffic that is read by the CPU, meaning that hardware-switched traffic is not captured.
I hope this information is useful for you. Let me kno if you had any comments.
