该文档的操作特别适合在网络中存在异常的中断或者丢包的情况下进行排障排查的辅助性操作。话不多说，直接上操作：
注意：某些时候采集这部分内容的decode信息的时候，量会比较大，如果可以的话，可以尽量通过SSH/Telnet等方式登录到设备采集。
命令参考：
Site2-C8kv#debug platform condition ipv4 ?
A.B.C.D/nn IPv4 address
access-list Set acl for conditional debug
both Simultaneous ingress and egress debug
egress Egress only debug
ingress Ingress only debug
设置Packet trace的参数：
Site2-C8kv#debug platform packet-trace packet ?
<16-8192> Packet count, value must be a power of two
Site2-C8kv#debug platform packet-trace packet 8192 ?
circular Capture last set of packets
data-size Size of trace data in bytes
fia-trace Trace of visited feature entries
summary-only Summary of the trace
<cr> <cr>
Site2-C8kv#debug platform packet-trace packet 8192 circular ?
data-size Size of trace data in bytes
fia-trace Trace of visited feature entries
summary-only Summary of the trace
<cr> <cr>
Site2-C8kv#debug platform packet-trace packet 8192 circular fia-trace data-size ?
<2048-16384> Data size in bytes, value must be a power of two
在完成如上的命令之后，需要通过命令“debug platform condition start”开始该Packet trace，让该feature working起来。
操作示例：
该示例中计划让一个终端去ping 223.5.5.5。观察实际的情况。
Site2-C8kv#debug platform condition ipv4 223.5.5.5/32 both
Site2-C8kv#debug platform packet-trace packet 8192 circular fia-trace data-size 2048
Please remember to turn on 'debug platform condition start' for packet-trace to work
Site2-C8kv#debug platform condition start
接下来让Client测试到223.5.5.5的访问：
可以在Edge上通过show platform hardware qfp active statistics drop检查drop的情况。
Site2-C8kv#show platform hardware qfp active statistics drop
Last clearing of QFP drops statistics : never
-------------------------------------------------------------------------
Global Drop Stats Packets Octets
-------------------------------------------------------------------------
BFDoffload 2626 225836
BadUidbSubIdx 2572 179407
Disabled 39 2684
ForUs 3 186
IpFragErr 14300 21707400
IpTtlExceeded 148 6860
IpsecInput 41411 7249133
IpsecOutput 9 2270
Ipv4EgressIntfEnforce 73 13940
Ipv4NoRoute 2182 171689
Ipv6NoRoute 3 168
Nat64v6tov4 6 480
SdwanImplicitAclDrop 429289 31779308
UnconfiguredIpv6Fia 85352 12652104
Site2-C8kv#
另外查看packet trace的配置情况：
Site2-C8kv#sho debugging
IOSXE Conditional Debug Configs:
Conditional Debug Global State: Start
Conditions Direction
----------------------------------------------------------------------------------------------|---------
All Interfaces & IPV4 [223.5.5.5/32] both
Feature Condition Type Value
-----------------------|------------------------|--------------------------------------------------------
Feature Type Submode Level
------------|-------------|----------------------------------------------------------------------------------------------|----------
IOSXE Packet Tracing Configs:
debug platform packet-trace packet 8192 circular fia-trace data-size 2048
Packet Infra debugs:
Ip Address Port
------------------------------------------------------|----------
采集完毕之后，我们可以通过如下命令停止操作：
Site2-C8kv#debug platform condition stop
Site2-C8kv#undebug all
All possible debugging has been turned off
此时查看操作已经Stop
Site2-C8kv#show debug
IOSXE Conditional Debug Configs:
Conditional Debug Global State: Stop
Conditions Direction
----------------------------------------------------------------------------------------------|---------
All Interfaces & IPV4 [223.5.5.5/32] both
Feature Condition Type Value
-----------------------|------------------------|--------------------------------------------------------
Feature Type Submode Level
------------|-------------|----------------------------------------------------------------------------------------------|----------
IOSXE Packet Tracing Configs:
debug platform packet-trace packet 8192 circular fia-trace data-size 2048
Packet Infra debugs:
Ip Address Port
------------------------------------------------------|----------
删除相关配置：
Site2-C8kv#no debug platform condition ipv4 223.5.5.5/32 both
Site2-C8kv#no debug platform packet-trace packet 8192 circular fia-trace data-size 2048
Site2-C8kv#show debug
IOSXE Conditional Debug Configs:
Conditional Debug Global State: Stop
IOSXE Packet Tracing Configs:
Packet Infra debugs:
Ip Address Port
------------------------------------------------------|----------
接下来可以查看报文的summary和decode情况，该操作需要在删除debug命令之前的查看。
Site2-C8kv#debug plat cond ipv4 223.5.5.5/32 both
Site2-C8kv#debug plat packet-trace packet 8000 circular fia-trace data-size 2048
Packet count rounded up from 8000 to 8192
Please remember to turn on 'debug platform condition start' for packet-trace to work
Site2-C8kv#debug platform condition start
Site2-C8kv#debug platform condition stop
Site2-C8kv#show platform packet-trace summary
Pkt Input Output State Reason
0 Gi3.1599 Gi1 FWD
1 Gi1 Gi3.1599 FWD
2 Gi3.1599 Gi1 FWD
3 Gi1 Gi3.1599 FWD
4 Gi3.1599 Gi1 FWD
5 Gi1 Gi3.1599 FWD
6 Gi3.1599 Gi1 FWD
7 Gi1 Gi3.1599 FWD
8 INJ.3 Gi1 FWD
9 Gi1 internal0/0/rp:0 PUNT 11 (For-us data)
10 INJ.3 Gi1 FWD
11 INJ.3 Gi1 FWD
12 Gi1 internal0/0/rp:0 PUNT 11 (For-us data)
13 Gi1 internal0/0/rp:0 PUNT 11 (For-us data)
14 Gi1 internal0/0/rp:0 PUNT 11 (For-us data)
15 INJ.3 Gi1 FWD
16 INJ.3 Gi1 FWD
17 Gi1 internal0/0/rp:0 PUNT 11 (For-us data)
Site2-C8kv#
我们可以通过如下命令查看具体某一个包的处理情况，如下查看的是pkt的编号为0的报文，我们可以使用show platform packet-trace packet all decode来查看所有的包。
Site2-C8kv#show platform packet-trace packet 0 decode
Packet: 0 CBUG ID: 1133
Summary
Input : GigabitEthernet3.1599
Output : GigabitEthernet1
State : FWD
Timestamp
Start : 4041755731847690 ns (07/13/2023 09:03:26.233055 UTC)
Stop : 4041755742171478 ns (07/13/2023 09:03:26.243379 UTC)
Path Trace
Feature: IPV4(Input)
Input : GigabitEthernet3.1599
Output : <unknown>
Source : 192.168.122.2
Destination : 223.5.5.5
Protocol : 1 (ICMP)
Feature: DEBUG_COND_INPUT_PKT
Entry : Input - 0x81432320
Input : GigabitEthernet3.1599
Output : <unknown>
Lapsed time : 506 ns
Feature: IPV4_INPUT_DST_LOOKUP_ISSUE
Entry : Input - 0x8145f98c
Input : GigabitEthernet3.1599
Output : <unknown>
Lapsed time : 1491 ns
Feature: IPV4_INPUT_ARL_SANITY
Entry : Input - 0x81434330
Input : GigabitEthernet3.1599
Output : <unknown>
Lapsed time : 571 ns
Feature: IPV4_INPUT_DST_LOOKUP_CONSUME
Entry : Input - 0x8145f988
Input : GigabitEthernet3.1599
Output : <unknown>
Lapsed time : 58 ns
Feature: IPV4_INPUT_FOR_US_MARTIAN
Entry : Input - 0x8145f994
Input : GigabitEthernet3.1599
Output : <unknown>
Lapsed time : 69 ns
Feature: CFT
API : cft_handle_pkt
packet capabilities : 0x0000018c
input vrf_idx : 0
calling feature : STILE
direction : Input
triplet.vrf_idx : 4
triplet.network_start : 0x100bf92
triplet.triplet_flags : 0x00000000
triplet.counter : 27
cft_bucket_number : 394788
cft_l3_payload_size : 40
cft_pkt_ind_flags : 0x00000000
cft_pkt_ind_valid : 0x00000931
tuple.src_ip : 192.168.122.2
tuple.dst_ip : 223.5.5.5
tuple.src_port : 15185
tuple.dst_port : 443
tuple.vrfid : 4
tuple.l4_protocol : ICMP
tuple.l3_protocol : IPV4
vrf_nums : 1
pkt_sb.num_flows : 0
pkt_sb.tuple_epoch : 27
returned cft_error : 14
returned fid : 0
Feature: NBAR
Packet number in flow: N/A
Classification state: Final
Classification name: ping
Classification ID: 1404 [CANA-L7:479]
Candidate classification sources:
N/A
Classification visibility name: ping
Classification visibility ID: 1404 [CANA-L7:479]
Number of matched sub-classifications: 0
Number of extracted fields: 0
Is PA (split) packet: False
Is FIF (first in flow) packet: False
TPH-MQC bitmask value: 0x0
Source MAC address: 50:00:00:26:00:00
Destination MAC address: 00:00:5E:00:01:3B
Traffic Categories:
ms-office-365/category: unset
ms-office-365/service-area: unset
sdavc/feed-id: 0
webex/region: 0
Feature: IPV4_INPUT_STILE_LEGACY
Entry : Input - 0x8146b7f0
Input : GigabitEthernet3.1599
Output : <unknown>
Lapsed time : 3600770 ns
Feature: DEBUG_COND_APPLICATION_IN
Entry : Input - 0x81432310
Input : GigabitEthernet3.1599
Output : <unknown>
Lapsed time : 200 ns
Feature: IPV4_INPUT_FNF_FIRST
Entry : Input - 0x81442d9c
Input : GigabitEthernet3.1599
Output : <unknown>
Lapsed time : 6637 ns
Feature: DEBUG_COND_APPLICATION_IN_CLR_TXT
Entry : Input - 0x8143230c
Input : GigabitEthernet3.1599
Output : <unknown>
Lapsed time : 53 ns
Feature: SDWAN Data Policy IN
VPN ID : 599
VRF : 4
Policy Name : _VPN10_centralized-datapolicy-230403_VPN599_centralized-datapolicy-230403-VPN599 (CG:9)
Seq : 91
DNS Flags : (0x0) NONE
Policy Flags : 0x10000
Nat Map ID : 0
SNG ID : 0
Feature: SDWAN_POLICY_FIA
Entry : Input - 0x81470890
Input : GigabitEthernet3.1599
Output : <unknown>
Lapsed time : 964706 ns
Feature: IPV4_REDIRECT_DNS_INPUT_FIA
Entry : Input - 0x81471338
Input : GigabitEthernet3.1599
Output : <unknown>
Lapsed time : 385 ns
Feature: IPV4_INPUT_LOOKUP_PROCESS
Entry : Input - 0x8145f9a0
Input : GigabitEthernet3.1599
Output : <unknown>
Lapsed time : 1137422 ns
Feature: IPV4_INPUT_DST_LOOKUP_ISSUE
Entry : Input - 0x8145f98c
Input : GigabitEthernet3.1599
Output : <unknown>
Lapsed time : 108080 ns
Feature: IPV4_INPUT_ARL
Entry : Input - 0x81434334
Input : GigabitEthernet3.1599
Output : <unknown>
Lapsed time : 609 ns
Feature: IPV4_INTERNAL_DST_LOOKUP_CONSUME
Entry : Input - 0x8145f9ac
Input : GigabitEthernet3.1599
Output : <unknown>
Lapsed time : 534 ns
Feature: IPV4_INTERNAL_FOR_US
Entry : Input - 0x8145f9b0
Input : GigabitEthernet3.1599
Output : <unknown>
Lapsed time : 11947 ns
Feature: IPV4_SDWAN_NAT_DIA_PREF_OCE_WALK
Entry : Input - 0x81470dac
Input : GigabitEthernet3.1599
Output : <unknown>
Lapsed time : 2429 ns
Feature: IPV4_INPUT_LOOKUP_PROCESS
Entry : Input - 0x8145f9a0
Input : GigabitEthernet3.1599
Output : GigabitEthernet1
Lapsed time : 965 ns
Feature: NBAR
Packet number in flow: N/A
Classification state: Final
Classification name: ping
Classification ID: 1404 [CANA-L7:479]
Candidate classification sources:
N/A
Classification visibility name: ping
Classification visibility ID: 1404 [CANA-L7:479]
Number of matched sub-classifications: 0
Number of extracted fields: 0
Is PA (split) packet: False
Is FIF (first in flow) packet: False
TPH-MQC bitmask value: 0x0
Source MAC address: 50:00:00:26:00:00
Destination MAC address: 00:00:5E:00:01:3B
Traffic Categories:
ms-office-365/category: unset
ms-office-365/service-area: unset
sdavc/feed-id: 0
webex/region: 0
Feature: IPV4_OUTPUT_STILE_SDWAN_WAN
Entry : Input - 0x8146b804
Input : GigabitEthernet3.1599
Output : GigabitEthernet1
Lapsed time : 2427 ns
Feature: IPV4_INPUT_IPOPTIONS_GOTO_OUTPUT_FEATURE
Entry : Output - 0x81435dac
Input : GigabitEthernet3.1599
Output : GigabitEthernet1
Lapsed time : 1394 ns
Feature: CBUG_OUTPUT_FIA
Entry : Output - 0x81432308
Input : GigabitEthernet3.1599
Output : GigabitEthernet1
Lapsed time : 59 ns
Feature: IPV4_OUTPUT_VFR
Entry : Output - 0x814608c8
Input : GigabitEthernet3.1599
Output : GigabitEthernet1
Lapsed time : 481 ns
Feature: NAT
VRFID : 4
table-id : 4
Protocol : ICMP
Direction : IN to OUT
From : Service side
Action : Translate Source
Steps : SESS-CREATE
Match id : 3
Old Address : 192.168.122.2
New Address : 10.102.1.2
Orig src port : 1
New src port : 1
Orig dest port : 1
New dest port : 1
Feature: IPV4_NAT_OUTPUT_FIA
Entry : Output - 0x81465bb4
Input : GigabitEthernet3.1599
Output : GigabitEthernet1
Lapsed time : 3195534 ns
Feature: IPV4_OUTPUT_THREAT_DEFENSE
Entry : Output - 0x8146da28
Input : GigabitEthernet3.1599
Output : GigabitEthernet1
Lapsed time : 271 ns
Feature: IPV4_VFR_REFRAG
Entry : Output - 0x814608cc
Input : GigabitEthernet3.1599
Output : GigabitEthernet1
Lapsed time : 100 ns
Feature: DEBUG_COND_APPLICATION_OUT_CLR_TXT
Entry : Output - 0x81432314
Input : GigabitEthernet3.1599
Output : GigabitEthernet1
Lapsed time : 64 ns
Feature: SDWAN_PRE_QOS_OUTPUT
Entry : Output - 0x81470f5c
Input : GigabitEthernet3.1599
Output : GigabitEthernet1
Lapsed time : 689 ns
Feature: IPV4_OUTPUT_L2_REWRITE
Entry : Output - 0x812c1dbc
Input : GigabitEthernet3.1599
Output : GigabitEthernet1
Lapsed time : 611 ns
Feature: SDWAN QoS Output
Fwd Class ID : 0
QoS Queue : 2
DSCP Rewrite : No
CoS Rewrite : No
EXP Rewrite : No
Rewrite Rule : n/a
Feature: SDWAN_QOS_OUTPUT_REWRITE
Entry : Output - 0x81470f60
Input : GigabitEthernet3.1599
Output : GigabitEthernet1
Lapsed time : 680 ns
Feature: DEBUG_COND_MAC_EGRESS
Entry : Output - 0x81432328
Input : GigabitEthernet3.1599
Output : GigabitEthernet1
Lapsed time : 116 ns
Feature: DEBUG_COND_APPLICATION_OUT
Entry : Output - 0x81432318
Input : GigabitEthernet3.1599
Output : GigabitEthernet1
Lapsed time : 40 ns
Feature: IPV4_OUTPUT_QOS
Entry : Output - 0x814691cc
Input : GigabitEthernet3.1599
Output : GigabitEthernet1
Lapsed time : 347556 ns
Feature: IPV4_OUTPUT_FRAG
Entry : Output - 0x8145f868
Input : GigabitEthernet3.1599
Output : GigabitEthernet1
Lapsed time : 134 ns
Feature: QOS
Direction : Egress
Action : FWD
Pak Priority : FALSE
Priority : FALSE
Queue ID : 119 (0x77)
PAL Queue ID : 1073741827 (0x40000003)
Queue Limit : 416
WRED enabled : TRUE
Inst Queue len : 0
Avg Queue len : n/a
Policy name : shape_GigabitEthernet1
Class name : class-default
Child Class : class-default
Feature: IPV4_OUTPUT_DROP_POLICY
Entry : Output - 0x814691c8
Input : GigabitEthernet3.1599
Output : GigabitEthernet1
Lapsed time : 476819 ns
Feature: IPV4_OUTPUT_SDWAN_FNF_FINAL
Entry : Output - 0x81442db8
Input : GigabitEthernet3.1599
Output : GigabitEthernet1
Lapsed time : 189035 ns
Feature: DEBUG_COND_OUTPUT_PKT
Entry : Output - 0x8143232c
Input : GigabitEthernet3.1599
Output : GigabitEthernet1
Lapsed time : 415 ns
Feature: MARMOT_SPA_D_TRANSMIT_PKT
Entry : Output - 0x81476d34
Input : GigabitEthernet3.1599
Output : GigabitEthernet1
Lapsed time : 104682 ns
Site2-C8kv#
注意：如上的操作是在测试环境进行，如何你需要在生产环境操作，请明确潜在的影响。
