cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
670
Views
0
Helpful
1
Replies

ISE bp tcpdump: unstoppable

Lance Wendel
Level 1
Level 1

Hi all,

anyone see somethig like this

ISE bp tcpdump: unstoppable

• custoemr ran cpdump to understand bp CRLhe has. Then he wanted to stop  it but he was not able to

o click on the stop button

under diag tools TCP dump

Status : Monitoring...(approcimate file size)

host name : <host name>

Netowrk interface : g0

promisuous mode : on

fileter : host x.x.x.x

o Tthen the following message appears

Status : Monitoring...(Cleaning up)

host name : <host name>

Netowrk interface : g0

promisuous mode : on

fileter : host x.x.x.x

o Then nothing. If he wait a long time he gets an error message but then left with an active trace

• ISE bp CRL retrieval

o I looked at the server logs of certificates: ISE servers are properly search the file

o I did capture this correspodant recovery of the CRL server: CRL is transmitted

ERROR 

Could not download Certificate Revocation List

CISE_Internal_Operations_Diagnostics 

33402

ConfigVersionId=100

LastErrorMessage=Failed performing

HTTP GET with error: (52) Server

returned nothing (no headers

no data)

Certificate Revocation list Url=http://

x.x.x.x/CertEnroll/xxxxxxxxxxxx.crl

any advice?

thanks in advance

Lance

1 Reply 1

blenka
Level 3
Level 3

Kindly try the second option as it might be enabled by you.

tcpdump
explains, that -W will use up the maximum number of files, then start all over with the first one.

You can stop this by pressing +.
To have it run even after logging out, I would use screen
screen
tcpdump port 80 -n -w packettrace.out -C 50 -W 100
+,

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: