Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

ISE bp tcpdump: unstoppable

Hi all,

anyone see somethig like this

ISE bp tcpdump: unstoppable

• custoemr ran cpdump to understand bp CRLhe has. Then he wanted to stop  it but he was not able to

o click on the stop button

under diag tools TCP dump

Status : Monitoring...(approcimate file size)

host name : <host name>

Netowrk interface : g0

promisuous mode : on

fileter : host x.x.x.x

o Tthen the following message appears

Status : Monitoring...(Cleaning up)

host name : <host name>

Netowrk interface : g0

promisuous mode : on

fileter : host x.x.x.x

o Then nothing. If he wait a long time he gets an error message but then left with an active trace

• ISE bp CRL retrieval

o I looked at the server logs of certificates: ISE servers are properly search the file

o I did capture this correspodant recovery of the CRL server: CRL is transmitted

ERROR 

Could not download Certificate Revocation List

CISE_Internal_Operations_Diagnostics 

33402

ConfigVersionId=100

LastErrorMessage=Failed performing

HTTP GET with error: (52) Server

returned nothing (no headers

no data)

Certificate Revocation list Url=http://

x.x.x.x/CertEnroll/xxxxxxxxxxxx.crl

any advice?

thanks in advance

Lance

1 REPLY
New Member

ISE bp tcpdump: unstoppable

Kindly try the second option as it might be enabled by you.

tcpdump
explains, that -W will use up the maximum number of files, then start all over with the first one.

You can stop this by pressing +.
To have it run even after logging out, I would use screen
screen
tcpdump port 80 -n -w packettrace.out -C 50 -W 100
+,

378
Views
0
Helpful
1
Replies