topic Re: Ruckus ICX7450-48 debug or packet-capture utilities in CLI in ICX Switches

Ruckus ICX7450-48 debug or packet-capture utilities in CLI

networkeng1168 — Wed, 09 Mar 2022 21:53:40 GMT

Hi,

I am trying to find documentation on utilizing the packet-capture and debug commands from the CLI for the mentioned switch.

Can anyone help point me in the right direction? I'm trying to debug SNMP trap collection.

Re: Ruckus ICX7450-48 debug or packet-capture utilities in CLI

Vásquez_Fer — Wed, 09 Mar 2022 22:10:18 GMT

Hi @networkeng1168

I believe there is not support pcap capabilities on ICX. We do have a dm raw utility, this will only capture packets hitting (arriving or transmitting) at the time on the unit

CX7150-48P Router#show who ( verify the connection )
ICX7150-48P Router#debug destination( Where you want to see the packets)
all Send debug message to all destinations
console Send debug message to console
logging Default
ssh Send debug message to SSH session
telnet Send debug message to telnet session

ICX7150-48P Router#dm raw mode brief
ICX7150-48P Router#dm raw max 100
ICX7150-48P Router#dm raw
Raw packet debugging is on now

Video Link as reference
https://www.youtube.com/watch?v=6a18tpkE_y4

You can also do a port mirror on the interface if you want to take a look at any specific interface

Standalone(config)#mirror-port ethernet 1/1/x (WHERE IS THE PC CONNECTED)
Standalone(config)#interface ethernet 1/2/5 or 2/2/5 ( INTERFACE THAT WE WANT TO CAPTURE)
Standalone(config-if-e1000-1/1/3)#monitor ethernet 1/1/x ( WHERE IS TE PC CONNECTED)
Standalone(config-if-e1000-1/1/3)#exi
Standalone(config)#show mirrror

Guide:

http://www.netadmin.us/docs/Port-Monitoring.pdf

Also RSPAN for any port destination mirroring

Guide:https://docs.commscope.com/bundle/fastiron-08090-commandref/page/GUID-2AD31709-F27B-4C8C-8AE9-A40633F6AF93.html

Video link: https://www.youtube.com/watch?v=yi9uQR6jYmw

I hope I've been helpful

Re: Ruckus ICX7450-48 debug or packet-capture utilities in CLI

networkeng1168 — Thu, 10 Mar 2022 14:06:08 GMT

Hi thank you.

Can the dw command help us debug snmp traps?

Re: Ruckus ICX7450-48 debug or packet-capture utilities in CLI

Orlando_Elias — Tue, 15 Mar 2022 23:58:20 GMT

Hello,

You can for sure debug SNMP traps using 'dm raw'
Apply 'dm raw fil 1 dpa <trap-receiver-ip_address>'
This will show if there are any traps been sent towards the destination.
You see some UDP packets going out the trap receiver every time you do 'config t' and then 'exit' as this will trigger a trap call 'configuration was potentially changed'.
Let me check your SNMP configuration to verify the trap has been correctly configured.

Re: Ruckus ICX7450-48 debug or packet-capture utilities in CLI

networkeng1168 — Wed, 16 Mar 2022 13:25:25 GMT

Hi, thank you, do you know where I can find more documentation on using the dm raw utility?

Re: Ruckus ICX7450-48 debug or packet-capture utilities in CLI

Orlando_Elias — Thu, 17 Mar 2022 23:44:10 GMT

Hi!
'dm' stands for 'diagnostic mode'. This is a series of commands reserved for TAC usage, so they are not public. I can still share some knowledge with you, though.

'debug destination' will help you print the output of 'dm raw' into the appropriate session.

If you have a stack and you want to print the output in console, make sure you're connected to the console port of the active controller.

'show who' will show you what is the session you're connecting to, to which you should print your output.

'dm raw ?' will give you the possible options as send/receive/exclude management port/ and filters.

'dm raw filter 1' can be used many times with different filters and this will apply as an 'AND'.

If you want to filter with 'OR' you can use filters 2, 3, and 4.

'dm raw filter none' will clear de filters.

The same 'dm raw' command is used to start as well as to stop the printing.

'dm raw' will only capture traffic that is read by the CPU, meaning that hardware-switched traffic is not captured.

I hope this information is useful for you. Let me kno if you had any comments.