Command:

debug ip packet


Mode:

Router#


Syntax:

debug ip packet [access-list-number]

no debug ip packet [access-list-number]

Syntax Description:

access-list-number

(Optional) The IP access list number that you can specify. If the datagram is not permitted by that access list, the related debugging output is suppressed.

Command Description:

 

To display general IP debugging information and IP security option (IPSO) security transactions, use the

debug ip packet privileged EXEC command. The no form of this command disables debugging output.

 

If a communication session is closing when it should not be, an end-to-end connection problem can be

the cause. The debug ip packet command is useful for analyzing the messages traveling between the

local and remote hosts.

 

IP debugging information includes packets received, generated, and forwarded. Fast-switched packets

do not generate messages.

 

IPSO security transactions include messages that describe the cause of failure each time a datagram fails

a security test in the system. This information is also sent to the sending host when the router

configuration allows it.

 

Caution:  Because the debug ip packet command generates a substantial amount of output, use it only when

traffic on the IP network is low, so other activity on the system is not adversely affected.


Example:

The following is sample output from the debug ip packet command:

 

Router# debug ip packet

IP: s=172.69.13.44 (Fddi0), d=10.125.254.1 (Serial2), g=172.69.16.2, forward

IP: s=172.69.1.57 (Ethernet4), d=10.36.125.2 (Serial2), g=172.69.16.2, forward

IP: s=172.69.1.6 (Ethernet4), d=255.255.255.255, rcvd 2

IP: s=172.69.1.55 (Ethernet4), d=172.69.2.42 (Fddi0), g=172.69.13.6, forward

IP: s=172.69.89.33 (Ethernet2), d=10.130.2.156 (Serial2), g=172.69.16.2, forward

IP: s=172.69.1.27 (Ethernet4), d=172.69.43.126 (Fddi1), g=172.69.23.5, forward

IP: s=172.69.1.27 (Ethernet4), d=172.69.43.126 (Fddi0), g=172.69.13.6, forward

IP: s=172.69.20.32 (Ethernet2), d=255.255.255.255, rcvd 2

IP: s=172.69.1.57 (Ethernet4), d=10.36.125.2 (Serial2), g=172.69.16.2, access denied

 

The output shows two types of messages that the debug ip packet command can produce; the first line

of output describes an IP packet that the router forwards, and the third line of output describes a packet

that is destined for the router. In the third line of output, rcvd 2 indicates that the router decided to receive

the packet.


Misconceptions:

           None.


Related Commands:

            None. 


� Cisco Systems, Inc. 2001, 2002, 2003
World Wide Education

Converted from CHM to HTML with chm2web Pro 2.85 (unicode)