Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

How to view an ip packet?

I just need the basics, I am using show ip nat command and see some "suspicious" connections to one of my servers. Therefore, I created an access list 199 that matched the suspicious activity and used the debug ip packet 199. However I am getting no output. I am using a telnet connection. I have never used these debug commands, does the output go to the serial port?

If so is there a way to change the output to the telnet session?

Is there a better way to see the contents of a specific set of packets?

Thanks

Rob

3 REPLIES
New Member

Re: How to view an ip packet?

I would assume you are telneting to the router, so, the debug output is sent to the console not to your VTY session. In order to send these outputs to your session, issue the following command,

"terminal monitor"

New Member

Re: How to view an ip packet?

I had just found that info, in:

http://www.cisco.com/en/US/customer/products/sw/iosswrel/ps1828/products_command_reference_chapter09186a008007ff5a.html

However, the output is not very helpful. I was hoping to actually see the packet itself. I can see that something is making a connection to one internal server. However, nothing is showing in netstat -a on the server so I was hoping to get more detailed info on what these connections are doing.

How do I get to see the actual packet?

Gold

Re: How to view an ip packet?

Hi -

Have you got any packet sniffer software? if you have then run this on your network and see what shows up and if you don't then a very good (FREE) version can be obtained from here -

http://www.ethereal.com/

Hope this helps --

176
Views
0
Helpful
3
Replies