October 22nd, 2003, 10:27 AM
Help with Cisco 2524 IOS 11.1 "debug" command
I'm running IOS 11.1 on a Cisco 2524. Some software isn't running properly and I'm trying to sniff all the packets going thru this router. Unfortunately I know nothing about routers and my debug commands aren't working.
This is what I'm trying. I would ideally like to view http requests, since that's the protocol that fails intermittently.
logging console debugging
Syslog logging: enabled (0 messages dropped, 0 flushes, 0 overruns)
Console logging: level informational, 5834 messages logged
Monitor logging: level debugging, 2080 messages logged
Trap logging: level informational, 22 message lines logged
tcp2: I ESTAB 220.127.116.11:49531 18.104.22.168:23 seq 1069858508
DATA 1 ACK 1856264936 PSH WIN 33580
tcp2: O ESTAB 22.214.171.124:49531 126.96.36.199:23 seq 1856264936
DATA 1 ACK 1069858509 PSH WIN 1419
IP: s=188.8.131.52 (local), d=184.108.40.206 (Ethernet0), len 60, sending
etc etc etc...................
Shouldn't this spew stuff to my screen? Why do I only see communications between my gateway: 220.127.116.11 and my virtual console (telnet): 18.104.22.168??
If I now go to a webpage, shouldn't I see that webpages IP address somewhere in the above list?
Any help is appreciated.
October 22nd, 2003, 10:54 AM
Okay, I found that "terminal monitor" will spew everything to my screen which is sufficient.
Does anyone know how to see every packet going thru a cisco 2524 while on the router?
October 23rd, 2003, 10:07 AM
Found it: for future reference if anyone else has the same problem:
you have to turn off fast switching to see the packets:
no ip route-cache
I thought fast switching could only takes place AFTER the initial msg, and that process switching would take over after that. So I rebooted my router to clear the cache. However my thinking is wrong somewhere, since that was not happening. By doing the above, I see the packets I expect.