Dell S6000 FTOS 9.0(2.0) Command Line Reference Guide for the System - Page 477

multicast proto=2 IP: s=0.0.0.0, d=30.30.30.30, len 100, unroutable ICMP type=8, code=0 IP: s=0.0.0.0, d=30.30.30.30, len 100, unroutable ICMP type=8, code=0 Table 21-1. debug ip packet Command Example Fields Field s= d= len sending rcvd fragment sending broad/multicast proto unroutable TCP src= UDP src= ICMP type= IP Fragment Description Lists the source address of the packet and the name of the interface (in parentheses) that received the packet. Lists the destination address of the packet and the name of the interface (in parentheses) through which the packet is being sent out on the network. Displays the packet's length. The last part of each line lists the status of the packet. Displays the source and destination ports, the sequence number, the acknowledgment number, and the window size of the packets in that TCP packets. Displays the source and destination ports for the UDP packets. Displays the ICMP type and code. States that it is a fragment and displays the unique number identifying the fragment (Ident) and the offset (in 8-byte units) of this fragment, (fragment offset) from the beginning of original datagram. Usage Information Use the count option to stop packets from flooding the user terminal when debugging is turned on. The access-group option supports only the equal to (eq) operator in TCP ACL rules. Port operators not equal to (neq), greater than (gt), less than (lt), or range are not supported in access-group option (see Figure 21-4). ARP packets (arp) and Ether-type (ether-type) are also not supported in access-group option. The entire rule is skipped to compose the filter. The access-group option pertains to: • IP Protocol Number • Internet Control Message Protocol* * but not the ICMP message type (0-255) • Any Internet Protocol • Transmission Control Protocol* * but not on the rst, syn, or urg bit • User Datagram Protocol 0 to 255 icmp ip tcp udp In the case of ambiguous access control list rules, the debug ip packet access-control command will be disabled. A message appears identifying the error (see Figure 21-4). Example Figure 21-4. debug ip packet access-group Command Errors FTOS#debug ip packet access-group test %Error: port operator GT not supported in access-list debug %Error: port operator LT not supported in access-list debug IPv4 Routing | 477