Switch/Router Forensics/HEX value before/after format

[Cisco Curt]

I was given (2) 3750G switches and (1) ISR4431 to do a data wipe.   The client wants a detailed report showing basically, the forensics of the equipment.  I figured a SHOW VERSION and FORMAT FLASH would suffice but it didn'.t.  He sent me an example (see below) of how it was supposed to look.  He needs the HEX values before and after the flash format.  Does anyone have any idea of the commands to show all this info for the switch and router??   SHOW DIAG is not being accepted on either.  Any info would be greatly appreciated.   See below for example:

Serial: FCW2011N7Y0 Cell: 7 Result: PASS Time: 11-06-2019_11:22:28 Model: AIR-CAP1602I-A-K9
nullshow_cookie

Reading cookie from SEEPROM

Part Number : 73-14671-04
Board Revision : B0
PCB Serial Number : FOC20103X82
PCB Fab Part Number : 28-10511-04
Deviation Number : 0
MAC Address : 00:FE:C8:75:4C:F8
MAC Address Block Size : 1
PCA Assembly Number : 000-00000-00
PCA Revision Number :
Product/Model Number : AIR-CAP1602I-A-K9
Top Assembly Part Number : 800-102028-03
Top Revision Number : A0
Top Assembly Serial Number : FCW2011N6Y0
RMA Test History : 00
RMA History : 00
RMA Number : 0-0-0-0
Device Type : 4C
Max Association Allowed : 2007
Radio(2.4G) Carrier Set : 0000
Radio(2.4G) Max Transmit Power Level : 50
Radio(2.4G) Antenna Diversity Support: 01
Radio(2.4G) Encryption Ability : 0002
Radio(5G) Carrier Set : 000B
Radio(5G) Max Transmit Power Level : 50
Radio(5G) Antenna Diversity Support : 01
Radio(5G) Encryption Ability : 0002
Radio(802.11g) Radio Mode : 0
PEP Product Identifier (PID) : AIR-CAP1602I-A-K9
PEP Version Identifier (VID) : V03
System Flags : 00
Radio(49) Carrier Set : FFFF
Radio(49) Max Transmit Power Level : 65535
Radio(49) Antenna Diversity Support : FF
Radio(49) Encryption Ability : FFFF
Radio(58) Carrier Set : 000B
Radio(58) Max Transmit Power Level : 50
Radio(58) Antenna Diversity Support : 01
Radio(58) Encryption Ability : 0002
Controller Type : FFFF
Host Controller Type : FFFF
Cookie format version 7
Cookie contents (hex):

0x00: 07 49 39 4F 04 42 30 46 4F 43 32 30 31 30 33 58

0x10: 38 32 1C 29 0F 04 00 00 00 00 00 FE C8 75 4C F8

0x20: 00 01 00 00 00 00 00 00 00 00 41 49 52 2D 43 41

0x30: 50 31 36 30 32 49 2D 41 2D 4B 39 20 20 20 03 20

0x40: 01 8E 8C 03 41 30 46 43 57 32 30 31 31 4E 36 59

0x50: 30 00 00 00 00 00 00 4C 07 D7 00 00 00 32 01 00

0x60: 02 00 0B 00 32 01 00 02 00 56 30 33 41 49 52 2D

0x70: 43 41 50 31 36 30 32 49 2D 41 2D 4B 39 20 00 FF

0x80: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF

0x90: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF

0xA0: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF

0xB0: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF

0xC0: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
format flash:

Are you sure you want to format "flash:" (all data will be lost) (y/n)?y

flashfs[0]: 0 files, 1 directories

[balaji.bandi]

Not sure what you try to achieve, you would like to reset the device to factorty defautl, you do not required to format the flash.

This will erase all the information, there is no IOS also to boot. instead you can use below guide to erase the information.

https://www.cisco.com/c/en/us/support/docs/switches/catalyst-2900-xl-series-switches/24328-156.html

if your intenetion to format, the dir note the device name to fomate.

[Cisco Curt]

I need the command for the switches and the ISR that shows the info in Bold on my original post before I format the flash.   I have looked and wonder even if this command exists.  I can not find anything, 

I need to save this test report showing all the info.

[Leo Laohoo]

Read New Forensic Investigation Procedures for First Responder Guides