Cisco 2100 Series Configuration Manual page 752

Using the Debug Facility
debug packet logging acl eth rule_index action dst src type vlan
•
where
–
–
–
–
–
–
debug packet logging acl ip rule_index action src dst proto src_port dst_port
•
where
–
–
–
debug packet logging acl eoip-eth rule_index action dst src type vlan
•
debug packet logging acl eoip-ip rule_index action src dst proto src_port dst_port
•
debug packet logging acl lwapp-dot11 rule_index action dst src bssid snap_type
•
where
–
–
debug packet logging acl lwapp-ip rule_index action src dst proto src_port dst_port
•
Note
To configure the format of the debug output, enter this command:
Step 3
debug packet logging format {hex2pcap | text2pcap}
The debug facility supports two output formats: hex2pcap and text2pcap. The standard format used by
IOS supports the use of hex2pcap and can be decoded using an HTML front end. The text2pcap option
is provided as an alternative so that a sequence of packets can be decoded from the same console log file.
Figure D-8
output.
Cisco Wireless LAN Controller Configuration Guide
D-36
rule_index is a value between 1 and 6 (inclusive).
action is permit, deny, or disable.
dst is the destination MAC address.
src is the source MAC address.
type is the two-byte type code (such as 0x800 for IP, 0x806 for ARP). This parameter also
accepts a few common string values such as "ip" (for 0x800) or "arp" (for 0x806).
vlan is the two-byte VLAN ID.
proto is a numeric or any string recognized by getprotobyname(). The controller supports the
following strings: ip, icmp, igmp, ggp, ipencap, st, tcp, egp, pup, udp, hmp, xns-idp, rdp,
iso-tp4, xtp, ddp, idpr-cmtp, rspf, vmtp, ospf, ipip, and encap.
src_port is the UDP/TCP two-byte source port (for example, telnet, 23) or "any." The controller
accepts a numeric or any string recognized by getservbyname(). The controller supports the
following strings: tcpmux, echo, discard, systat, daytime, netstat, qotd, msp, chargen, ftp-data,
ftp, fsp, ssh, telnet, smtp, time, rlp, nameserver, whois, re-mail-ck, domain, mtp, bootps, bootpc,
tftp, gopher, rje, finger, www, link, kerberos, supdup, hostnames, iso-tsap, csnet-ns,
3com-tsmux, rtelnet, pop-2, pop-3, sunrpc, auth, sftp, uucp-path, nntp, ntp, netbios-ns,
netbios-dgm, netbios-ssn, imap2, snmp, snmp-trap, cmip-man, cmip-agent, xdmcp, nextstep,
bgp, prospero, irc, smux, at-rtmp, at-nbp, at-echo, at-zis, qmtp, z3950, ipx, imap3, ulistserv,
https, snpp, saft, npmp-local, npmp-gui, and hmmp-ind.
dst_port is the UDP/TCP two-byte destination port (for example, telnet, 23) or "any." The
controller accepts a numeric or any string recognized by getservbyname(). The controller
supports the same strings as those for the src_port.
bssid is the Basic Service Set Identifier.
snap_type is the Ethernet type.
To remove all configured ACLs, enter this command: debug packet logging acl clear-all.
shows an example of hex2pcap output, and
Appendix D
Figure D-9 shows an example of text2pcap
Troubleshooting
OL-17037-01