Strange issue with ACE capture command

[silk]

Hello there,

I have one load balancer (ACE A2 3.6a) that is acting weird on simple capture traces.

setting up an access-list:

access-list test extended permit ip any host 10.10.10.1

gives the following unusual output:

15:38:53.956439 0:c:9:b8:0:0 0:55:0:50:80:34 0088 9404: sap 04 > sap 00 I (s=0,r=40,C) len=9386

15:38:53.996146 0:34:9:b8:0:19 0:4e:0:50:80:34 b888 311:

                         0020 000b fcfe 1b04 0050 56ac 006a 0800

                         4500 0028 56c6 4000 4006 6bda 0a25 a47a

                         0a25 bf6b 01bb 6402 d04d 1582 78da

15:38:54.091466 0:34:9:b8:0:19 0:4e:0:50:80:34 b888 12318:

                         0020 000b fcfe 1b04 0050 56ac 006a 0800

                         4500 0028 56c7 4000 4006 6bd9 0a25 a47a

                         0a25 bf6b 01bb 6402 d04d 1582 78da

15:38:54.091646 0:c:9:b8:0:0 0:48:0:50:80:34 0088 8827: sap 04 > sap 00 I (s=0,r=40,C) len=8809

15:38:54.091822 0:c:4:e7:0:0 0:48:0:50:80:34 0088 9371: sap 04 > sap 00 I (s=0,r=17,P) len=9353

15:38:54.091985 0:38:4:e7:0:14 0:4e:0:50:80:34 e706 8840:

                         0000 000b fcfe 1b04 0023 0418 1240 0800

                         45c0 0028 6cbb 0000 ff06 bd36 0a25 bf6b

                         0a25 bd68 6402 01bb f064 0cbf b229

instead of the classic tcpdump like output showing ip addresses.

What could possibly be wrong?

[JeramyKoval]

I have a similar problem.  If I take a pcap and view it via the ACE CLI I am able to see the L3 information.  However when I copy the file to my workstation and open with Wireshark I only see the L2 information. 

[silk]

In my case nothing changes.

If I import the captured file into wireshark I still don't get IP information, just the same garbage that I can see

in realtime in the CLI.

[Borys Berlog · Accepted solution]

Hi, it's CSCtz75479 which is regression and affects only A236 and A236a.

[silk]

Hi Borys,

thanks for yout reply.

Bug description states that it's fixed in:

3.0(0)A2(3.6b),3.0(0)A2(3.5.96)

but none is available for download.

Where can I get a non affected up-to-date version of the ACSW for the ACE Module?

Thanks in advance.