04-13-2024 05:17 AM
I'm trying to debug and only view ICMP traffic between 2 specific host via ping, but there are so many messages, it's hard to troubleshoot. Is there a way to filter and see only the ICMP traffic between them? I've tried debug ip icmp and using acl(debug ip packet), yet I'm still seeing other traffic such as BGP messages, etc.
Solved! Go to Solution.
04-13-2024 07:27 AM
04-13-2024 05:27 AM
Undebug all
Then
Ip access-list extended 100
Permit icmp any any
Then
Debug ip packet 100
Debug ip icmp
Do above and check
MHM
04-13-2024 05:31 AM
I tried it, but I'm still seeing all other traffic such as BGP messages.
04-13-2024 05:37 AM
Did you
Undebug all
First
If not then it always show you old debug.
In real network for any troubleshooting you need in end do
Undebug all
MHM
04-13-2024 05:46 AM - edited 04-13-2024 05:47 AM
Yes, I did. If I had to guess, I'm thinking I'm seeing the ICMP from the debug command you mentioned and all the other traffic, but I need to stop the console from showing non ICMP traffic somehow. I should also mention, if I undebug all, I still see all the log messages.
04-13-2024 05:50 AM
bgp log-neighbor-changes <- this config under bgp
Also did you run
Logging monitor or logging console and logging level 7?
MHM
04-13-2024 06:09 AM
I just added bgp log statement to see what would happen. I tried logging monitor 7 and logging console 7 and these messages are still showing up.
04-13-2024 06:12 AM
You need to do opposed'
Remove bgp log
And reduce the
Log console/ monitor to level below debug level (level7)
MHM
04-13-2024 06:31 AM
Looks like there are limits to the log filters. It doesn't seem possible to isolate the filtering of logs to just show specific traffic as ICMP. BGP plus many other message types and debug messages seem to be linked to level 7, so there's no way to separate for filtering.
04-13-2024 06:41 AM
Let me lab it
Update you tonight
MHM
04-13-2024 07:27 AM
04-13-2024 07:49 AM - edited 04-13-2024 07:56 AM
If you setup bgp on R2 and R1 and give either router the wrong as (i.e., remote-as 101 on R2 even though R1 is 100), you will mostly get a bunch of log messages for bgp plus the icmp traffic you're seeing in this log. I want to be able to see only ICMP traffic without any others messages or errors. I could do a 'show log | i ICMP' or something similar, but I want to see it in real-time.
04-13-2024 08:03 AM
Friend I already run bgp between R1 abd R2
Abd as I mention before I use
No bgp log
Under bgp process to prevent bgp generate log
Abd I use
Terminal monitor Command
In R3 (telent to R1) to see real time log of icmp.
I already share log I get in real time
MHM
04-13-2024 08:22 AM
I took a break and came back and checked my config to see how different mine was to your screenshot, and I see that its working now. Not sure what I was doing wrong prior. Thanks for your help.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide