Dell S3100 EMC Command Line Reference Guide for the Series 9.14.2.5 - Page 700

Example Field ICMP type= IP Fragment Description Displays the ICMP type and code. States that it is a fragment and displays the unique number identifying the fragment (Ident) and the offset (in 8-byte units) of this fragment (fragment offset) from the beginning of the original datagram. IP: s=10.1.2.62 (local), d=10.1.2.206 (Ma 1/1), len 54, sending TCP src=23, dst=40869, seq=2112994894, ack=606901739, win=8191 ACK PUSH IP: s=10.1.2.206 (Ma 1/1), d=10.1.2.62, len 40, rcvd TCP src=0, dst=0, seq=0, ack=0, win=0 IP: s=10.1.2.62 (local), d=10.1.2.206 (Ma 1/1), len 226, sending TCP src=23, dst=40869, seq=2112994896, ack=606901739, win=8192 ACK PUSH IP: s=10.1.2.216 (Ma 1/1), d=10.1.2.255, len 78, rcvd UDP src=0, dst=0 IP: s=10.1.2.62 (local), d=10.1.2.3 (Ma 1/1), len 1500, sending fragment IP Fragment, Ident = 4741, fragment offset = 0 ICMP type=0, code=0 IP: s=10.1.2.62 (local), d=10.1.2.3 (Ma 1/1), len 1500, sending fragment IP Fragment, Ident = 4741, fragment offset = 1480 IP: s=40.40.40.40 (local), d=224.0.0.5 (Gi 4/11), len 64, sending broad/ multicast proto=89 IP: s=40.40.40.40 (local), d=224.0.0.6 (Gi 4/11), len 28, sending broad/ multicast proto=2 IP: s=0.0.0.0, d=30.30.30.30, len 100, unroutable ICMP type=8, code=0 IP: s=0.0.0.0, d=30.30.30.30, len 100, unroutable ICMP type=8, code=0 Usage Information To stop packets from flooding the user terminal when debugging is turned on, use the count option. The access-group option supports only the equal to (eq) operator in TCP ACL rules. Port operators not equal to (neq), greater than (gt), less than (lt), or range are not supported in access-group option (refer to the following example). ARP packets (arp) and Ether-type (ether-type) are also not supported in the accessgroup option. The entire rule is skipped to compose the filter. The access-group option pertains to: • IP protocol number: from 0 to 255 • Internet control message protocol (icmp) but not the ICMP message type (from 0 to 255) • Any internet protocol (ip) • Transmission Control Protocol (tcp) but not on the rst, syn, or urg bits • User Datagram Protocol (udp) In the case of ambiguous access control list rules, the debug ip packet access-control command is disabled. A message appears identifying the error (refer to the Example below). Example (Error Messages) DellEMC# debug ip packet access-group test %Error: port operator GT not supported in access-list debug %Error: port operator LT not supported in access-list debug %Error: port operator RANGE not supported in access-list debug %Error: port operator NEQ not supported in access-list debug DellEMC#00:10:45: %RPM0-P:CP %IPMGR-3-DEBUG_IP_PACKET_ACL_AMBIGUOUS_EXP: Ambiguous rules not supported in access-list debug, access-list debugging is turned off DellEMC# 700 IPv4 Routing