debug ip packet
debug ip packet [access-list-number]no debug ip packet [access-list-number]
(Optional) The IP access list number that you can specify. If the datagram is not permitted by that access list, the related debugging output is suppressed.
To display general IP debugging information and IP security option (IPSO) security transactions, use the
debug ip packet privileged EXEC command. The no form of this command disables debugging output.
If a communication session is closing when it should not be, an end-to-end connection problem can be
the cause. The debug ip packet command is useful for analyzing the messages traveling between the
local and remote hosts.
IP debugging information includes packets received, generated, and forwarded. Fast-switched packets
do not generate messages.
IPSO security transactions include messages that describe the cause of failure each time a datagram fails
a security test in the system. This information is also sent to the sending host when the router
configuration allows it.
Caution: Because the debug ip packet command generates a substantial amount of output, use it only when
traffic on the IP network is low, so other activity on the system is not adversely affected.
The following is sample output from the debug ip packet command:
Router# debug ip packet
IP: s=220.127.116.11 (Fddi0), d=10.125.254.1 (Serial2), g=18.104.22.168, forward
IP: s=22.214.171.124 (Ethernet4), d=10.36.125.2 (Serial2), g=126.96.36.199, forward
IP: s=188.8.131.52 (Ethernet4), d=255.255.255.255, rcvd 2
IP: s=184.108.40.206 (Ethernet4), d=220.127.116.11 (Fddi0), g=18.104.22.168, forward
IP: s=22.214.171.124 (Ethernet2), d=10.130.2.156 (Serial2), g=126.96.36.199, forward
IP: s=188.8.131.52 (Ethernet4), d=184.108.40.206 (Fddi1), g=220.127.116.11, forward
IP: s=18.104.22.168 (Ethernet4), d=22.214.171.124 (Fddi0), g=126.96.36.199, forward
IP: s=188.8.131.52 (Ethernet2), d=255.255.255.255, rcvd 2
IP: s=184.108.40.206 (Ethernet4), d=10.36.125.2 (Serial2), g=220.127.116.11, access denied
The output shows two types of messages that the debug ip packet command can produce; the first line
of output describes an IP packet that the router forwards, and the third line of output describes a packet
that is destined for the router. In the third line of output, rcvd 2 indicates that the router decided to receive
� Cisco Systems, Inc. 2001, 2002, 2003
World Wide Education
|Converted from CHM to HTML with chm2web Pro 2.85 (unicode)|