Serviceability Packet Tracing Commands

These commands improve the capability of network engineers to diagnose conditions affecting their product.

Caution Sign CAUTION: The output of “debug” commands can be long and may adversely affect system performance.

debug aaa accounting

This command is useful to debug accounting configuration and functionality in User Manager.

Format: debug aaa accounting
Mode: Privileged EXEC

no debug aaa accounting

Use this command to turn off debugging of User Manager accounting functionality.

Format: no debug aaa accounting
Mode: Privileged EXEC

debug arp

Use this command to enable ARP debug protocol messages.

Default: disabled
Format: debug arp
Mode: Privileged EXEC

no debug arp

Use this command to disable ARP debug protocol messages.

Format: no debug arp
Mode: Privileged EXEC

debug auto-voip

Use this command to enable Auto VOIP debug messages. Use the optional parameters to trace H323, SCCP, or SIP packets respectively.

Default: disabled
Format: debug auto-voip [H323|SCCP|SIP]
Mode: Privileged EXEC

no debug auto-voip

Use this command to disable Auto VOIP debug messages.

Format: no debug auto-voip
Mode: Privileged EXEC

debug clear

This command disables all previously enabled "debug" traces.

Default: disabled
Format: debug clear
Mode: Privileged EXEC

debug console

This command enables the display of “debug” trace output on the login session in which it is executed. Debug console display must be enabled in order to view any trace output. The output of debug trace commands will appear on all login sessions for which debug console has been enabled. The configuration of this command remains in effect for the life of the login session. The effect of this command is not persistent across resets.

Default: disabled
Format: debug console
Mode: Privileged EXEC

no debug console

This command disables the display of “debug” trace output on the login session in which it is executed.

Format: no debug console
Mode: Privileged EXEC

debug file system

This command enables the ssh/telnet to OS on the login session in which it is executed. Debug file system display must be enabled in order to access a ssh/telnet session.

Default: disabled
Format: debug filesystem
Mode: Privileged EXEC

debug dhcp packet

This command displays "debug" information about DHCPv4 client activities and traces DHCPv4 packets to and from the local DHCPv4 client.

Default: disabled
Format: debug dhcp packet [transmit | receive]
Mode: Privileged EXEC

no debug dhcp

This command disables the display of "debug" trace output for DHCPv4 client activity.

Format: no debug dhcp packet [transmit | receive]
Mode: Privileged EXEC

debug dhcp-snooping mac-address <mac-addr>

This command displays “debug” information about mac filtered DHCPv4 client activities and traces DHCPv4 packets to and from the local DHCPv4 client.

Default: disabled
Format: debug dhcp-snooping mac-address <mac-addr>
Mode: Privileged EXEC

no debug dhcp-snooping mac-address <mac-addr>

This command disables the display of “debug” trace output for mac filtered DHCPv4 client activity.

Format: no debug dhcp-snooping mac-address <mac-addr>
Mode: Privileged EXEC

debug dot1x packet

Use this command to enable dot1x packet debug trace.

Default: disabled
Format: debug dot1x
Mode: Privileged EXEC

no debug dot1x packet

Use this command to disable dot1x packet debug trace.

Format: no debug dot1x
Mode: Privileged EXEC

debug igmpsnooping packet

This command enables tracing of IGMP Snooping packets received and transmitted by the switch.

Default: disabled
Format: debug igmpsnooping packet
Mode: Privileged EXEC

no debug igmpsnooping packet

This command disables tracing of IGMP Snooping packets.

Format: no debug igmpsnooping packet
Mode: Privileged EXEC

debug igmpsnooping packet transmit

This command enables tracing of IGMP Snooping packets transmitted by the switch. Snooping should be enabled on the device and the interface in order to monitor packets for a particular interface.

Default: disabled
Format: debug igmpsnooping packet transmit
Mode: Privileged EXEC

A sample output of the trace message is shown below.

<15> JAN 01 02:45:06 192.168.17.29-1 IGMPSNOOP[185429992]: igmp_snooping_debug.c(116) 908 % Pkt TX - Intf: 1/0/20(20), Vlan_Id:1 Src_Mac: 00:03:0e:00:00:00 Dest_Mac: 01:00:5e:00:00:01 Src_IP: 9.1.1.1 Dest_IP: 225.0.0.1 Type: V2_Membership_Report Group: 225.0.0.1

The following parameters are displayed in the trace message:

TX: A packet transmitted by the device.
Interface: The interface that the packet went out on. Format used is unit/slot/port (internal interface number). Unit is always shown as 1 for interfaces on a nonstacking device.
Src_Mac: Source MAC address of the packet.
Dest_Mac: Destination multicast MAC address of the packet.
Src_IP: The source IP address in the IP header in the packet.
Dest_IP: The destination multicast IP address in the packet.
Type: The type of IGMP packet. Type can be one of the following:Membership Query – IGMP Membership Query V1_Membership_Report – IGMP Version 1 Membership Report, V2_Membership_Report – IGMP Version 2 Membership Report, V3_Membership_Report – IGMP Version 3 Membership Report, V2_Leave_Group – IGMP Version 2 Leave Group.
Group: Multicast group address in the IGMP header.

no debug igmpsnooping transmit

This command disables tracing of transmitted IGMP snooping packets.

Format: no debug igmpsnooping transmit
Mode: Privileged EXEC

debug igmpsnooping packet receive

This command enables tracing of IGMP Snooping packets received by the switch. Snooping should be enabled on the device and the interface in order to monitor packets for a particular interface.

Default: disabled
Format: debug igmpsnooping packet receive
Mode: Privileged EXEC

A sample output of the trace message is shown below.

<15> JAN 01 02:45:06 192.168.17.29-1 IGMPSNOOP[185429992]: igmp_snooping_debug.c(116) 908 % Pkt RX - Intf: 1/0/20(20), Vlan_Id:1 Src_Mac: 00:03:0e:00:00:10 Dest_Mac: 01:00:5e:00:00:05 Src_IP: 11.1.1.1 Dest_IP: 225.0.0.5 Type: Membership_Query Group: 225.0.0.5

The following parameters are displayed in the trace message:

RX: A packet received by the device.
Intf: The interface that the packet went out on. Format used is unit/slot/port (internal interface number). Unit is always shown as 1 for interfaces on a nonstacking device.
Src_Mac: Source MAC address of the packet.
Dest_Mac: Destination multicast MAC address of the packet.
Src_IP: The source IP address in the ip header in the packet.
Dest_IP: The destination multicast ip address in the packet.
Type: The type of IGMP packet. Type can be one of the following:Membership_Query – IGMP Membership Query, V1_Membership_Report – IGMP Version 1 Membership Report, V2_Membership_Report – IGMP Version 2 Membership Report, V3_Membership_Report – IGMP Version 3 Membership Report, V2_Leave_Group – IGMP Version 2 Leave Group.
Group: Multicast group address in the IGMP header.

no debug igmpsnooping receive

This command disables tracing of received IGMP Snooping packets.

Format: no debug igmpsnooping receive
Mode: Privileged EXEC

debug ip acl

Use this command to enable debug of IP Protocol packets matching the ACL criteria.

Default: disabled
Format: debug ip acl acl Number
Mode: Privileged EXEC

no debug ip acl

Use this command to disable debug of IP Protocol packets matching the ACL criteria.

Format: no debug ip acl acl Number
Mode: Privileged EXEC

debug ip igmp packet

Use this command to trace IGMP packet reception and transmission. receive traces only received IGMP packets and transmit traces only transmitted IGMP packets. When neither keyword is used in the command, then all IGMP packet traces are dumped. Vital information such as source address, destination address, control packet type, packet length, and the interface on which the packet is received or transmitted is displayed on the console.

Default: disabled
Format: debug ip igmp packet [receive | transmit]
Mode: Privileged EXEC

no debug ip igmp packet

Use this command to disable debug tracing of IGMP packet reception and transmission.

Format: no debug ip igmp packet [receive | transmit]
Mode: Privileged EXEC

debug ip vrrp

Use this command to enable VRRP debug protocol messages.

Default: disabled
Format: debug ip vrrp
Mode: Privileged EXEC

no debug ip vrrp

Use this command to disable VRRP debug protocol messages.

Format: no debug ip vrrp
Mode: Privileged EXEC

debug ipv6 ospfv3 packet

Use this command to enable OSPFv3 packet debug trace.

Default: disabled
Format: debug ipv6 ospfv3 packet
Mode: Privileged EXEC

no debug ospfv3 packet

Use this command to disable tracing of OSPFv3 packets.

Format: no debug ipv6 ospfv3 packet
Mode: Privileged EXEC

debug ipv6 dhcp

This command displays "debug" information about DHCPv6 client activities and traces DHCPv6 packets to and from the local DHCPv6 client.

Default: disabled
Format: debug ipv6 dhcp
Mode: Privileged EXEC

no debug ipv6 dhcp

This command disables the display of "debug" trace output for DHCPv6 client activity.

Format: no debug ipv6 dhcp
Mode: Privileged EXEC

debug ipv6 mcache packet

Use this command for tracing MDATAv6 packet reception and transmission. receive traces only received data packets and transmit traces only transmitted data packets. When neither keyword is used in the command, then all data packet traces are dumped. Vital information such as source address, destination address, packet length, and the interface on which the packet is received or transmitted is displayed on the console.

Default: disabled
Format: debug ipv6 mcache packet [receive | transmit]
Mode: Privileged EXEC

no debug ipv6 mcache packet

Use this command to disable debug tracing of MDATAv6 packet reception and transmission.

Format: no debug ipv6 mcache packet [receive | transmit]
Mode: Privileged EXEC

debug ipv6 mld packet

Use this command to trace MLDv6 packet reception and transmission. receive traces only received MLDv6 packets and transmit traces only transmitted MLDv6 packets. When neither keyword is used in the command, then all MLDv6 packet traces are dumped. Vital information such as source address, destination address, control packet type, packet length, and the interface on which the packet is received or transmitted is displayed on the console.

Default: disabled
Format: debug ipv6 mld packet [receive | transmit]
Mode: Privileged EXEC

no debug ipv6 mld packet

Use this command to disable debug tracing of MLDv6 packet reception and transmission.

Format: no debug ipv6 mld packet [receive | transmit]
Mode: Privileged EXEC

debug ipv6 pimdm packet

Use this command to trace PIMDMv6 packet reception and transmission. receive traces only received PIMDMv6 packets and transmit traces only transmitted PIMDMv6 packets. When neither keyword is used in the command, then all PIMDMv6 packet traces are dumped. Vital information such as source address, destination address, control packet type, packet length, and the interface on which the packet is received or transmitted is displayed on the console.

Default: disabled
Format: debug ipv6 pimdm packet [receive | transmit]
Mode: Privileged EXEC

no debug ipv6 pimdm packet

Use this command to disable debug tracing of PIMDMv6 packet reception and transmission.

debug ipv6 pimsm packet

Use this command to trace PIMSMv6 packet reception and transmission. receive traces only received PIMSMv6 packets and transmit traces only transmitted PIMSMv6 packets. When neither keyword is used in the command, then all PIMSMv6 packet traces are dumped. Vital information such as source address, destination address, control packet type, packet length, and the interface on which the packet is received or transmitted is displayed on the console.

Default: disabled
Format: debug ipv6 pimsm packet [receive | transmit]
Mode: Privileged EXEC

no debug ipv6 pimsm packet

Use this command to disable debug tracing of PIMSMv6 packet reception and transmission.

Format: no debug ipv6 pimsm packet [receive | transmit]
Mode: Privileged EXEC

debug lacp packet

This command enables tracing of LACP packets received and transmitted by the switch.

Default: disabled
Format: debug lacp packet
Mode: Privileged

A sample output of the trace message is shown below.

<15> JAN 01 14:04:51 10.254.24.31-1 DOT3AD[183697744]: dot3ad_debug.c(385) 58%% Pkt TX - Intf: 1/0/1(1), Type: LACP, Sys: 00:11:88:14:62:e1, State: 0x47, Key: 0x36

no debug lacp packet

This command disables tracing of LACP packets.

Format: no debug lacp packet
Mode: Privileged EXEC

debug mldsnooping packet

Use this command to trace MLD snooping packet reception and transmission. receive traces only received MLD snooping packets and transmit traces only transmitted MLD snooping packets. When neither keyword is used in the command, then all MLD snooping packet traces are dumped. Vital information such as source address, destination address, control packet type, packet length, and the interface on which the packet is received or transmitted is displayed on the console.

Default: disabled
Format: debug mldsnooping packet [receive | transmit]
Mode: Privileged EXEC

no debug mldsnooping packet

Use this command to disable debug tracing of MLD snooping packet reception and transmission.

debug ospf packet

This command enables tracing of OSPF packets received and transmitted by the switch.

Default: disabled
Format: debug ospf packet
Mode: Privileged EXEC

Sample outputs of the trace messages are shown below.

<15> JAN 02 11:03:31 10.50.50.1-2 OSPF[46300472]: ospf_debug.c(297) 25430 % Pkt RX - Intf:2/0/48 Src, Ip:192.168.50.2 DestIp:224.0.0.5 AreaId:0.0.0.0 Type:HELLO, NetMask:255.255.255.0 D esigRouter:0.0.0.0 Backup:0.0.0.0

<15> JAN 02 11:03:35 10.50.50.1-2 OSPF[46300472]: ospf_debug.c(293) 25431 % Pkt TX - Intf:2/0/48 Src Ip:10.50.50.1 DestIp:192.168.50.2 AreaId:0.0.0.0 Type:DB_DSCR Mtu:1500 Options:E Flags: I/M/MS Seq:126166

<15> JAN 02 11:03:36 10.50.50.1-2 OSPF[46300472]: ospf_debug.c(297) 25434 % Pkt RX - Intf:2/0/48 Src Ip:192.168.50.2 DestIp:192.168.50.1 AreaId:0.0.0.0 Type:LS_REQ Length: 1500

<15> JAN 02 11:03:36 10.50.50.1-2 OSPF[46300472]: ospf_debug.c(293) 25435 % Pkt TX - Intf:2/0/48 Src Ip:10.50.50.1 DestIp:192.168.50.2 AreaId:0.0.0.0 Type:LS_UPD Length: 1500

<15> JAN 02 11:03:37 10.50.50.1-2 OSPF[46300472]: ospf_debug.c(293) 25441 % Pkt TX - Intf:2/0/48 Src Ip:10.50.50.1 DestIp:224.0.0.6 AreaId:0.0.0.0 Type:LS_ACK Length: 1500

The following parameters are displayed in the trace message:

TX/RX: TX refers to a packet transmitted by the device. RX refers to packets received by the device.
Intf: The interface that the packet came in or went out on. Format used is unit/slot/port (internal interface number).
SrcIp: The source IP address in the IP header of the packet.
DestIp: The destination IP address in the IP header of the packet.
AreaId: The area ID in the OSPF header of the packet.
Type: Could be one of the following: HELLO – Hello packet, DB_DSCR – Database descriptor, LS_REQ – LS Request, LS_UPD – LS Update, LS_ACK – LS Acknowledge

The remaining fields in the trace are specific to the type of OSPF Packet.

HELLO packet field definitions:

Netmask: The netmask in the hello packet.
DesignRouter: Designated Router IP address.
Backup: Backup router IP address.

DB_DSCR packet field definitions:

MTU: MTU
Options: Options in the OSPF packet.
Flags: Could be one or more of the following: I – Init, M – More, MS – Master/Slave, Seq Sequence Number of the DD packet.

LS_REQ packet field definitions:

Length: Length of packet.

LS_UPD packet field definitions.

Length: Length of packet.

LS_ACK packet field definitions.

Length: Length of packet.

no debug ospf packet

This command disables tracing of OSPF packets.

Format: no debug ospf packet
Mode: Privileged EXEC

debug ping packet

This command enables tracing of ICMP echo requests and responses. The command traces pings on the network port/ serviceport for switching packages. For routing packages, pings are traced on the routing ports as well.

Default: disabled
Format: debug ping packet
Mode: Privileged EXEC

A sample output of the trace message is shown below.

<15> JAN 01 00:21:22 192.168.17.29-1 SIM[181040176]: sim_debug.c(128) 20 % Pkt TX - Intf: 1/0/1(1), SRC_IP:10.50.50.2, DEST_IP:10.50.50.1, Type:ECHO_REQUEST <15> JAN 01 00:21:22 192.168.17.29-1 SIM[182813968]: sim_debug.c(82) 21 % Pkt RX - Intf: 1/0/1(1), SRC_IP:10.50.50.1, DEST_IP:10.50.50.2, Type:ECHO_REPLY

The following parameters are displayed in the trace message:

TX/RX: TX refers to a packet transmitted by the device. RX refers to packets received by the device.
Intf: The interface that the packet came in or went out on. Format used is unit/slot/port (internal interface number). Unit is always shown as 1 for interfaces on a non-stacking device.
SRC_IP: The source IP address in the IP header in the packet.
DEST_IP: The destination IP address in the IP header in the packet.
Type: Type determines whether or not the ICMP message is a REQUEST or a RESPONSE.

no debug ping packet

This command disables tracing of ICMP echo requests and responses.

Format: no debug ping packet
Mode: Privileged EXEC

debug rip packet

This command turns on tracing of RIP requests and responses. This command takes no options. The output is directed to the log file.

Default: disabled
Format: debug rip packet
Mode: Privileged EXEC

A sample output of the trace message is shown below.

<15> JAN 01 00:35:15 192.168.17.29-1 RIP[181783160]: rip_map_debug.c(96) 775%, Pkt RX on Intf: 1/0/1(1), Src_IP:43.1.1.1 Dest_IP:43.1.1.2, Rip_Version: RIPv2 Packet_Type:RIP_RESPONSE, ROUTE 1): Network: 10.1.1.0 Mask: 255.255.255.0 Metric: 1, ROUTE 2): Network: 40.1.0.0 Mask: 255.255.0.0 Metric: 1, ROUTE 3): Network: 10.50.50.0 Mask: 255.255.255.0 Metric: 1, ROUTE 4): Network: 41.1.0.0 Mask: 255.255.0.0 Metric: 1, ROUTE 5): Network:42.0.0.0 Mask:255.0.0.0 Metric:1. Another 6 routes present in packet not displayed.

The following parameters are displayed in the trace message:

TX/RX: TX refers to a packet transmitted by the device. RX refers to packets received by the device.
Interface: The interface that the packet came in or went out on. Format used is unit/slot/port (internal interface number). Unit is always shown as 1 for interfaces on a non-stacking device.
Src_IP: The source IP address in the IP header of the packet.
Dest_IP: The destination IP address in the IP header of the packet.
Rip_Version: RIP version used <RIPv1 or RIPv2>.
Packet_Type: Type of RIP packet. <RIP_REQUEST or RIP_RESPONSE>.
Routes: Up to 5 routes in the packet are displayed in the following format: Network: <a.b.c.d> Mask <a.b.c.d> Next_Hop <a.b.c.d> Metric <a>. The next hop is only displayed if it is different from 0.0.0.0. For RIPv1 packets, Mask is always 0.0.0.0.
Number of routes not printed: Only the first five routes present in the packet are included in the trace. There is another notification of the number of additional routes present in the packet that were not included in the trace.

no debug rip packet

This command disables tracing of RIP requests and responses.

Format: no debug rip packet
Mode: Privileged EXEC

debug sflow packet

Use this command to enable sFlow debug packet trace.

Default: disabled
Format: debug sflow packet
Mode: Privileged EXEC

no debug sflow packet

Use this command to disable sFlow debug packet trace.

Format: no debug sflow packet
Mode: Privileged EXEC

debug spanning-tree bpdu

This command enables tracing of spanning tree BPDUs received and transmitted by the switch.

Default: disabled
Format: debug spanning-tree bpdu
Mode: Privileged EXEC

no debug spanning-tree bpdu

This command disables tracing of spanning tree BPDUs.

Format: no debug spanning-tree bpdu
Mode: Privileged EXEC

debug spanning-tree bpdu receive

This command enables tracing of spanning tree BPDUs received by the switch. Spanning tree should be enabled on the device and on the interface in order to monitor packets for a particular interface.

Default: disabled
Format: debug spanning-tree bpdu receive
Mode: Privileged EXEC

A sample output of the trace message is shown below.

<15> JAN 01 01:02:04 192.168.17.29-1 DOT1S[191096896]: dot1s_debug.c(1249) 101 % Pkt RX - Intf: 1/0/9(9), Source_Mac: 00:11:88:4e:c2:10 Version: 3, Root Mac: 00:11:88:4e:c2:00, Root Priority: 0x8000 Path Cost: 0

The following parameters are displayed in the trace message:

RX: A packet received by the device.
Intf: The interface that the packet came in on. Format used is port/slot (internal interface number). Unit is always shown as 1 for interfaces on a nonstacking device.
Source_Mac: Source MAC address of the packet.
Version: Spanning tree protocol version (0-3). 0 refers to STP, 2 RSTP and 3 MSTP.
Root_Mac: MAC address of the CIST root bridge.
Root_Priority: Priority of the CIST root bridge. The value is between 0 and 61440. It is displayed in hex in multiples of 4096.
Path_Cost: External root path cost component of the BPDU.

no debug spanning-tree bpdu receive

This command disables tracing of received spanning tree BPDUs.

Format: no debug spanning-tree bpdu receive
Mode: Privileged EXEC

debug spanning-tree bpdu transmit

This command enables tracing of spanning tree BPDUs transmitted by the switch. Spanning tree should be enabled on the device and on the interface in order to monitor packets on a particular interface.

Default: disabled
Format: debug spanning-tree bpdu transmit
Mode: Privileged EXEC

A sample output of the trace message is shown below.

<15> JAN 01 01:02:04 192.168.17.29-1 DOT1S[191096896]: dot1s_debug.c(1249) 101 % Pkt TX - Intf: 1/0/7(7), Source_Mac: 00:11:88:4e:c2:00 Version: 3, Root_Mac: 00:11:88:4e:c2:00, Root_Priority: 0x8000 Path_Cost: 0

The following parameters are displayed in the trace message:

TX: A packet transmitted by the device.
Intf: The interface that the packet went out on. Format used is port/slot (internal interface number). Unit is always shown as 1 for interfaces on a nonstacking device.
Source_Mac: Source MAC address of the packet.
Version: Spanning tree protocol version (0-3). 0 refers to STP, 2 RSTP and 3 MSTP.
Root_Mac: MAC address of the CIST root bridge.
Root_Priority: Priority of the CIST root bridge. The value is between 0 and 61440. It is displayed in hex in multiples of 4096.
Path_Cost: External root path cost component of the BPDU.

no debug spanning-tree bpdu transmit

This command disables tracing of transmitted spanning tree BPDUs.

Format: no debug spanning-tree bpdu transmit
Mode: Privileged EXEC

show debugging

Use the show debugging command to display enabled packet tracing configurations.

Format: show debugging
Mode: Privileged EXEC

no show debugging

Use the no show debugging command to disable packet tracing configurations.

Format: no show debugging
Mode: Privileged EXEC

logging persistent

Default: Disable
Format: logging persistent <severity level>
Mode: Global Config

no logging persistent

Use this command to disable the persistent logging in the switch.

Format: no logging persistent
Mode: Global Config