#1
  1. No Profile Picture
    Contributing User
    Devshed Newbie (0 - 499 posts)

    Join Date
    Jul 2003
    Posts
    63
    Rep Power
    11

    Help with Cisco 2524 IOS 11.1 "debug" command


    Hi all,
    I'm running IOS 11.1 on a Cisco 2524. Some software isn't running properly and I'm trying to sniff all the packets going thru this router. Unfortunately I know nothing about routers and my debug commands aren't working.

    This is what I'm trying. I would ideally like to view http requests, since that's the protocol that fails intermittently.

    config t
    logging console debugging
    ^Z
    debug all


    cisco1>>show logging
    Syslog logging: enabled (0 messages dropped, 0 flushes, 0 overruns)
    Console logging: level informational, 5834 messages logged
    Monitor logging: level debugging, 2080 messages logged
    Trap logging: level informational, 22 message lines logged

    tcp2: I ESTAB 12.170.16.130:49531 12.170.19.245:23 seq 1069858508
    DATA 1 ACK 1856264936 PSH WIN 33580
    tcp2: O ESTAB 12.170.16.130:49531 12.170.19.245:23 seq 1856264936
    DATA 1 ACK 1069858509 PSH WIN 1419
    IP: s=12.170.19.245 (local), d=12.170.16.130 (Ethernet0), len 60, sending

    etc etc etc...................

    Shouldn't this spew stuff to my screen? Why do I only see communications between my gateway: 12.170.16.130 and my virtual console (telnet): 12.170.19.245??

    If I now go to a webpage, shouldn't I see that webpages IP address somewhere in the above list?

    Any help is appreciated.
  2. #2
  3. No Profile Picture
    Contributing User
    Devshed Newbie (0 - 499 posts)

    Join Date
    Jul 2003
    Posts
    63
    Rep Power
    11
    Okay, I found that "terminal monitor" will spew everything to my screen which is sufficient.

    Does anyone know how to see every packet going thru a cisco 2524 while on the router?
  4. #3
  5. No Profile Picture
    Contributing User
    Devshed Newbie (0 - 499 posts)

    Join Date
    Jul 2003
    Posts
    63
    Rep Power
    11
    Found it: for future reference if anyone else has the same problem:

    you have to turn off fast switching to see the packets:

    config t
    interface Serial0
    no ip route-cache

    I thought fast switching could only takes place AFTER the initial msg, and that process switching would take over after that. So I rebooted my router to clear the cache. However my thinking is wrong somewhere, since that was not happening. By doing the above, I see the packets I expect.

IMN logo majestic logo threadwatch logo seochat tools logo