ISE bp tcpdump: unstoppable

Lance Wendel — Mon, 11 Mar 2019 03:55:20 GMT

Hi all,

anyone see somethig like this

• custoemr ran cpdump to understand bp CRLhe has. Then he wanted to stop it but he was not able to

o click on the stop button

under diag tools TCP dump

Status : Monitoring...(approcimate file size)

host name : <host name>

Netowrk interface : g0

promisuous mode : on

fileter : host x.x.x.x

o Tthen the following message appears

Status : Monitoring...(Cleaning up)

host name : <host name>

Netowrk interface : g0

promisuous mode : on

fileter : host x.x.x.x

o Then nothing. If he wait a long time he gets an error message but then left with an active trace

• ISE bp CRL retrieval

o I looked at the server logs of certificates: ISE servers are properly search the file

o I did capture this correspodant recovery of the CRL server: CRL is transmitted

ERROR

Could not download Certificate Revocation List

CISE_Internal_Operations_Diagnostics

33402

ConfigVersionId=100

LastErrorMessage=Failed performing

HTTP GET with error: (52) Server

returned nothing (no headers

no data)

Certificate Revocation list Url=http://

x.x.x.x/CertEnroll/xxxxxxxxxxxx.crl

any advice?

thanks in advance

Lance

ISE bp tcpdump: unstoppable

blenka — Sat, 28 Sep 2013 00:53:39 GMT

Kindly try the second option as it might be enabled by you.

tcpdump
explains, that -W will use up the maximum number of files, then start all over with the first one.

You can stop this by pressing +.
To have it run even after logging out, I would use screen
screen
tcpdump port 80 -n -w packettrace.out -C 50 -W 100
+,

topic ISE bp tcpdump: unstoppable in Network Access Control

ISE bp tcpdump: unstoppable

ISE bp tcpdump: unstoppable