Enable-Mode Commands
Entering enable-mode
You can perform basic system administration tasks in enable mode. Only administrator users can perform enable-mode commands. All commands available in user mode are also available in enable mode.
Configuration-Mode Commands describes some enable commands because they are more easily understood in relationship to the feature set of which they are a part.
To enter enable mode:
- Connect to the CLI and enter the following command:
login as: admin
Brocade Services Director
Last login: Wed Jan 20 13:02:09 2012 from 10.0.1.1
gen1-sh139 > enable
gen1-sh139 #- To exit enable mode, enter exit. For information about the exit command, see ping.
All the commands available in user mode are also available in enable mode.
For an alphabetical list of Enable-Mode commands, see the Contents page of this book.
Enable-Mode Commands
The following section contains the Services Director commands.
For an alphabetical list of Enable-Mode commands, see the Table of Contents for this guide.
clear arp-cache
Clears dynamic entries from the ARP cache. This command does not clear static entries.
Syntax
clear arp-cacheExamples
amnesiac # clear arp-cacheRelated Commands
show arp
clear hardware edac-ue-alarm
Clears Acknowledge EDAC UE (uncorrectable errors) Alarm.
Syntax
clear hardware edac-ue-alarmUsage Guidelines
The amber LED light stops blinking on the system.
Examples
amnesiac # clear hardware edac-ue-alarmRelated Commands
clear hardware error-log
Clears IPMI System Event Log (SEL).
Syntax
clear hardware error-logUsage Guidelines
The amber LED light stops blinking on the system.
Examples
amnesiac # clear hardware error-logRelated Commands
clock set
Sets the system date and time.
Syntax
clock set { yyyy/mm/dd/ hh:mm:ss }Parameters
yyyy/mm/dd/ hh:mm:ssSpecify the date and time (year, month, day, hour, minutes, and seconds).
Examples
amnesiac # clock set 2003/12/31 23:59:59Related Commands
show log
configure terminal
Enables configuration from the terminal by entering the configuration subsystem. You must execute the Services Director command first to enter configuration mode.
Syntax
[no] configure terminalUsage Guidelines
To exit the configuration subsystem, type exit.
The no command option disables the terminal configuration.
Examples
amnesiac # configure terminalRelated Commands
disable
Exits enable mode.
Syntax
disableExamples
amnesiac # disableRelated Commands
exit
file stats delete
Deletes the statistics file.
Syntax
file stats delete filenameParameters
filenameSpecify the name of the file to delete.
Examples
amnesiac # file stats delete throughputRelated Commands
show clock
file stats move
Renames the statistics file.
Syntax
file stats move source-filename destination-filenameParameters
source-filenameSpecify the source file to rename.
destination-filenameSpecify the new filename.
Examples
amnesiac # file stats move throughput throughput2Related Commands
file stats upload
Uploads a specified statistics report file to a remote host.
Syntax
file stats upload filename { destination | case-number }Parameters
filenameMandatory. Specify the source filename to upload.
destinationMandatory. Specify the upload protocol, authentication credentials, remote host, and host filepath for the remote file. Supported protocols are HTTP, FTP and SCP.
There is no default setting for this property.
case-numberMandatory. Specify the customer case number.
Examples
amnesiac # file stats upload throughput ftp://admin:[email protected]/stats 194170Related Commands
file tcpdump delete
Deletes a TCP dump output file.
Syntax
file tcpdump delete filenameParameters
filenameSpecify the tcpdump file to delete.
Examples
amnesiac # file tcpdump delete dumpfileRelated Commands
file tcpdump upload
Uploads a specific TCP dump output file to a remote host.
Syntax
file tcpdump upload filename { destination | case-number }Parameters
filenameMandatory. Specify the source filename to upload.
destinationMandatory. Specify the upload protocol, authentication credentials, remote host, and host filepath for the remote file. Supported protocols are HTTP, FTP and SCP.
There is no default setting for this property.
case-numberMandatory. Specify the customer case number.
Examples
amnesiac # file tcpdump upload dumpfile http://www.test.com/stats 194171Related Commands
file upload clear-stats
Clears the file upload statistics.
Syntax
file upload clear-statsUsage Guidelines
The file upload clear-stats command clears the statistics displayed by the show uploads command.
Examples
amnesiac > file upload clear-statsRelated Commands
show uploads
file upload stop
Stops an upload.
Syntax
file upload stopUsage Guidelines
The file upload stop command stops an upload of a resource.
Examples
amnesiac > file upload stopRelated Commands
show uploads
image delete
Deletes the specified software image.
Syntax
image delete image-filenameParameters
image-filenameSpecify the name of the software image to delete.
Examples
amnesiac # image delete snkv1.0Related Commands
show images
image delete-all
Deletes all software image files on the disk.
Syntax
image delete-allExamples
amnesiac # image delete-allRelated Commands
show uploads
image fetch
Downloads a software image from a remote host.
Syntax
image fetch URL, -scp://, or -ftp://username:password@hostname/path/filename image-filenameParameters
URL,-scp://, or -ftp://username:password@hostname/path/filenameSpecify the upload protocol, the location, and authentication credentials for the remote image file.
Press the Enter key to download the image. The image retains the same name it had on the server.
image-filenameSpecify a local filename for the image.
Examples
amnesiac # image fetch http://www.domain.com/v.1.0 version1.0Related Commands
show images
image install
Installs the software image onto a system partition.
Syntax
image install image-filename partitionParameters
image-filenameSpecify the software image filename to install.
partitionSpecify the partition number: 1, 2.
Examples
amnesiac # image install version1.0 2Related Commands
show images
image move
Moves or renames an inactive system image on the hard disk.
Syntax
image move source-image-name new-image-nameParameters
source-image-nameSpecify the name of the software image to move or rename.
new-image-nameSpecify the new name of the software image.
Examples
amnesiac # image move www.domain.com/v.1.0 version1.0Related Commands
show images
image upgrade
Installs a system image on the backup boot partition.
Syntax
image upgrade image-nameParameters
image-nameSpecify the software image filename to install.
Usage Guidelines
The image upgrade command only installs the image on the backup boot partition.
Examples
amnesiac # image upgrade image187.imgRelated Commands
show images
ntpdate
Conducts a one-time synchronization with a specified NTP server.
Syntax
ntpdate ip-addrParameters
ip-addrSpecify the NTP server with which to synchronize.
Examples
amnesiac # ntpdate 10.10.10.1Related Commands
show ntp
reload
Reboots the system.
Syntax
reload [ halt ]|[ force ]Parameters
haltShuts down the system.
forceForces an immediate reboot of the system even if it is busy.
Usage Guidelines
After this command is used, the master password is required.
- If you chose to store the master password in the Services Director when it was installed, the master password is used automatically, and the Services Director service restarts automatically.
- If you DID NOT choose to store the master password in the Services Director when it was installed, the Services Director service is initially unavailable. To resolve this, you must re-enter the master password using the VA GUI. This is not possible using the CLI. After this is done, the Services Director service restarts.
Examples
amnesiac # reload
The session will close. It takes about 2-3 minutes to reboot the appliance.Related Commands
disable, ssc kpti, show ssc kpti
show arp
Displays the contents of the ARP cache. The ARP cache includes all statically configured ARP entries, as well as any that the system has acquired dynamically.
Syntax
show arp [ static ]Parameters
staticDisplays static ARP addresses.
Examples
amnesiac # show arp
ARP cache contents
IP 10.0.0.1 maps to MAC 00:07:E9:70:20:15
IP 10.0.0.2 maps to MAC 00:05:5D:36:CB:29
IP 10.0.100.22 maps to MAC 00:07:E9:55:10:09Related Commands
show banner
Displays the banner settings.
Syntax
show bannerExamples
amnesiac # show banner
Banners:
MOTD:
Issue: Services Director
Net Issue: Brocade Services DirectorRelated Commands
banner motd
show configuration
Displays the current and saved configuration settings that differ from the default settings.
Syntax
show configuration [ full ]Parameters
fullDisplays all CLI commands and does not exclude commands that set default values.
Examples
amnesiac # show configuration
##
## Network interface configuration
##
no interface aux dhcp
interface aux duplex "auto"
no interface aux shutdown
interface aux speed "auto"
interface primary ip address 10.0.0.3 /16
##
## Routing configuration
##
ip default-gateway "10.0.0.1"
##
## Other IP configuration
##
hostname "amnesiac"
ip domain-list domain.com
ip domain-list domain.com
ip name-server 10.0.0.2
##
## Logging configuration
##
logging local "info"
##
## Process Manager configuration
##
pm process mgmtd launch timeout "4000"
pm process sport shutdown order "0"
pm process statsd shutdown order "0"
##
## Network management configuration
##
## Miscellaneous other settings (this is a partial list of settings)Related Commands
show configuration files
Displays the list of active and backup configuration files or the contents of a specified file.
Syntax
show configuration [ filename ]Parameters
filenameSpecify the filename. The default filenames are:
- initial: Specify the initial configuration.
- initial.bak: Specify the initial backup configuration.
- cold: Specify the configuration file before SDR has occurred.
- working (active): Specify the current configuration.
- working.bak: Specify the current backup configuration.
Examples
amnesiac # show configuration files initial
##
## Network interface configuration
##
no interface aux dhcp
interface aux duplex "auto"
interface aux ip address 10.0.62.75 /16
interface aux mtu "1500"
no interface aux shutdown
interface aux speed "auto"
interface aux txqueuelen "100"
no interface primary dhcp
##
## Routing configuration
##
ip default-gateway "10.0.0.1"
##
## Logging configuration
##
logging 10.1.10.200
logging 10.1.10.200 trap "info"
*** this is a partial display ***Related Commands
show configuration
Displays running configuration settings that are different from the defaults.
Syntax
show configuration running [ full ]Parameters
runningDisplays system CLI commands to recreate current running configuration.
fullDisplays all system CLI commands and does not exclude commands that set default values.
Examples
amnesiac # show configuration running
##
## Network interface configuration
##
no interface aux dhcp
interface aux duplex "auto"
interface aux ip address 10.0.62.75 /16
interface aux mtu "1500"
no interface aux shutdown
interface aux speed "auto"
interface aux txqueuelen "100"
no interface inpath0_0 dhcp
interface inpath0_0 duplex "auto"
interface inpath0_0 ip address 10.11.62.75 /16
interface inpath0_0 mtu "1500"
no interface inpath0_0 shutdown
interface inpath0_0 speed "auto"
interface inpath0_0 txqueuelen "100"
no interface lan0_0 dhcp
interface lan0_0 duplex "auto"
interface lan0_0 mtu "0"
no interface lan0_0 shutdown
interface lan0_0 speed "auto"
interface lan0_0 txqueuelen "100"
lines 1-23
##(displays running configuration; this is a partial list of settings.)Related Commands
show files events config
Displays events configuration.
Syntax
show files events configExamples
amnesiac # show files events configRelated Commands
show files process-dump
Displays a list of crash dump files.
Syntax
show files process-dumpExamples
amnesiac # show files process-dumpRelated Commands
show files stats
Displays performance statistics files.
Syntax
show files statsUsage Guidelines
You export performance statistics to files using the stats export command.
Examples
amnesiac # show files statsRelated Commands
show files tcpdump
Displays files saved by the tcpdump utility.
Syntax
show files tcpdumpExamples
amnesiac # show files tcpdump
unopt.cap
big-noopt.cap
big-opt.cap
big.tgz
big-opt2.capRelated Commands
tcpdump
show fips status
Displays FIPS status information by feature.
Syntax
show fips statusExamples
amnesiac > show fips status
FIPS Mode: Disabled.Related Commands
fips enable
show hardware all
Displays hardware information such as the current slot configuration.
Syntax
show hardware allExamples
amnesiac # show hardware all
Hardware Revision: B
Mainboard: Series 3000/5000 motherboard, ................. CMP-00072
Slot 0: 4 Port Copper GigE Network Bypass Card, ....... CMP-00074
Slot 1: (Empty)
Slot 2: (Empty)
Slot 3: (Empty)
Slot 4: 6 Port SATA RAID I/O Card, .................... CMP-00014
Slot 5: (Empty)Related Commands
show interfaces
Displays the running state settings and statistics for specific interfaces.
Syntax
show interfaces interface_name [ arp | arp static | brief | configured | dhcp-lease ]Parameters
interface_nameSpecify the interface name. For example, aux, lan0_0, wan0_0, primary, in-path0_0, lo.
arpDisplays static and dynamic ARP entries for this interface.
arp staticDisplays statically-configured ARP entries for this interface.
briefDisplays the running state settings without statistics.
configuredDisplays configured settings for the interface.
dhcp-leaseDisplays DHCP lease for this interface.
Usage Guidelines
The settings and statistics displayed varies when using DHCP.
See also show interfaces brief and show interfaces configured.
Examples
*** show brief details loopback interface ***
amnesiac # show interfaces lo brief
Interface lo state
Up: yes
Interface type: loopback
IP address: 127.0.0.1
Netmask: 255.0.0.0
IPv6 address: ::1/128
Speed: N/A
Duplex: N/A
MTU: 16436
HW address: N/A
Link: yes
Counters cleared date: 2017/10/26 07:18:57
*** show full details for loopback interface ***
amnesiac # show interfaces lo configured
Interface lo configuration
Enabled: yes
DHCP: no
Dynamic DNS DHCP: no
DHCPv6: no
Dynamic DNS DHCPv6: no
IP address: 127.0.0.1
Netmask: 255.0.0.0
Speed: auto
Duplex: auto
MTU: 16436
Counters cleared date: 2017/10/26 07:18:57
amnesiac # show interfaces lo
Interface lo state
Up: yes
Interface type: loopback
IP address: 127.0.0.1
Netmask: 255.0.0.0
IPv6 address: ::1/128
Speed: N/A
Duplex: N/A
MTU: 16436
HW address: N/A
Link: yes
Counters cleared date: 2017/10/26 07:18:57
RX bytes: 82972572
RX packets: 342912
RX mcast packets: 0
RX discards: 0
RX errors: 0
RX overruns: 0
RX frame: 0
TX bytes: 82972572
TX packets: 342912
TX discards: 0
TX errors: 0
TX overruns: 0
TX carrier: 0
TX collisions: 0
*** show primary interface ***
amnesiac # show interfaces primary arp
ARP cache contents
IP 10.62.132.37 maps to MAC 44:31:92:5D:90:42
IP 10.62.128.30 maps to MAC 00:0C:29:41:DD:6C
IP 10.62.128.1 maps to MAC 00:10:DB:FF:10:04
IP 10.62.167.197 maps to MAC 00:50:56:A6:64:F4
IP 10.62.169.163 maps to MAC 00:50:56:A6:6F:93
*** show aux interface ***
amnesiac # show interfaces aux
Interface aux state
Up: yes
Interface type: ethernet
IP address:
Netmask:
IPv6 link-local address: fe80::250:56ff:fea6:195c/64
Speed: 1000Mb/s (auto)
Duplex: full (auto)
MTU: 1500
HW address: 00:50:56:A6:19:5C
Link: yes
Counters cleared date: 2017/10/26 07:18:57
RX bytes: 39112481
RX packets: 625959
RX mcast packets: 0
RX discards: 0
RX errors: 0
RX overruns: 0
RX frame: 0
TX bytes: 4338
TX packets: 51
TX discards: 0
TX errors: 0
TX overruns: 0
TX carrier: 0
TX collisions: 0Related Commands
interface
show interfaces brief
Displays brief running state for all interfaces
Syntax
show interfaces briefUsage Guidelines
The settings and statistics displayed varies when using DHCP.
See also show interfaces and show interfaces configured.
Examples
amnesiac # show interfaces brief
Interface primary state
Up: yes
Interface type: ethernet
IP address: 10.62.169.160
Netmask: 255.255.192.0
IPv6 link-local address: fe80::250:56ff:fea6:539/64
Speed: 1000Mb/s (auto)
Duplex: full (auto)
MTU: 1500
HW address: 00:50:56:A6:05:39
Link: yes
Counters cleared date: 2017/10/26 07:18:57
Interface aux state
Up: yes
Interface type: ethernet
IP address:
Netmask:
IPv6 link-local address: fe80::250:56ff:fea6:195c/64
Speed: 1000Mb/s (auto)
Duplex: full (auto)
MTU: 1500
HW address: 00:50:56:A6:19:5C
Link: yes
Counters cleared date: 2017/10/26 07:18:57Related Commands
interface
show interfaces configured
Displays configuration for all interfaces.
Syntax
show interfaces configuredUsage Guidelines
The settings and statistics displayed varies when using DHCP.
See also show interfaces and show interfaces brief.
Examples
amnesiac # show interfaces configured
Interface aux configuration
Enabled: yes
DHCP: yes
Dynamic DNS DHCP: no
DHCPv6: no
Dynamic DNS DHCPv6: no
IP address: 169.254.1.1
Netmask: 255.255.0.0
IPv6 address:
Speed: auto
Duplex: auto
MTU: 1500
Counters cleared date: 2013/11/02 01:06:10
Interface lo configuration
Enabled: yes
DHCP: no
Dynamic DNS DHCP: no
DHCPv6: no
Dynamic DNS DHCPv6: no
IP address: 127.0.0.1
Netmask: 255.0.0.0
Speed: auto
Duplex: auto
MTU: 16436
Counters cleared date: 2013/11/02 01:06:10
Interface primary configuration
Enabled: yes
DHCP: no
Dynamic DNS DHCP: no
DHCPv6: no
Dynamic DNS DHCPv6: no
IP address:
Netmask:
IPv6 address:
Speed: auto
Duplex: auto
MTU: 1500
Counters cleared date: 2013/11/02 01:06:10Related Commands
interface
show ip default-gateway
Displays the IP default gateway.
Syntax
show ip default-gateway [ static ]Parameters
staticDisplays the static default gateway.
Examples
amnesiac # show ip default-gateway static
Configured default gateway: 10.0.0.1Related Commands
show ipv6 default-gateway
Displays the IPv6 default gateway.
Syntax
show ipv6 default-gateway [ static ]Parameters
staticDisplays the static default gateway.
Examples
amnesiac # show ipv6 default-gateway static
Configured default gateway: 2001:38dc:52::e9a4:c5:6282/64Related Commands
show ipv6 route
Displays active IPv6 routes, both dynamic and static.
Syntax
show ipv6 route [ static ]Parameters
staticDisplays the static default gateway.
Examples
amnesiac # show ipv6 route
Destination Network Gateway Interface
::1/128 :: lo
2000::/64 :: primary
2001::20e:b6ff:fe01:58f1/128 :: lo
2001::/60 :: aux
2001::/60 :: primary
fe80::200:ff:fe00:0/128 :: lo
fe80::200:ff:fe00:0/128 :: lo
[partial example]Related Commands
ipv6 route
show ip route
Displays active routes both dynamic and static.
Syntax
show ip route [ static ]Parameters
staticDisplays configured static routes.
Examples
amnesiac # show ip route static
Destination Mask Gateway
default 0.0.0.0 10.0.0.4Related Commands
ip route
show job
Displays the status of a scheduled job.
Syntax
show job job-idParameters
job-idSpecify the job identification number.
Examples
amnesiac # show job 10
job {job_id}: 10
Status: pending
Name: myjob
Comment: this is a text
Absolute range:
Commands:
show info.
show connections.
show version.Related Commands
job command
show jobs
Displays a list of all jobs.
Syntax
show jobsExamples
amnesiac # show jobs
% No jobs configured.Related Commands
job command
show licenses
Displays VLAB licenses, used for "root" access to the SSC host. Customers do not typically have access to VLAB licenses.
Syntax
show licensesExamples
amnesiac # show licenses
Local: LK1-VLAB-0000-0000-1-3E83-2754-8910
Index: 1
Feature: VLAB
Valid: yes
Active: yes
Start date:
End date:show log
Displays the system logs.
Syntax
show log [ continuous | files log-number | reverse | matching ]Parameters
continuousDisplays the log continuously, similar to the Linux tail -f command.
files log-numberDisplays a list of log files or a specific log file.
reverseDisplays the log information, in reverse order, with the latest entry at the top.
matchingDisplays a list of matching log files.
Examples
amnesiac # show log
May 22 20:00:00 localhost /usr/sbin/crond[784]: (root) CMD (/usr/sbin/logrotate /etc/logrotate.conf)
May 22 20:00:00 localhost cli[555]: [cli.INFO]: user admin: CLI got signal 2 (SIGINT)
May 22 20:02:31 localhost cli[555]: [cli.INFO]: user admin: Executing command: show ip route
May 22 20:02:38 localhost cli[555]: [cli.INFO]: user admin: CLI got signal 2 (SIGINT)
Dec 22 20:03:16 localhost cli[555]: [cli.INFO]: user admin: CLI got signal 2 (SIGINT)
May 22 20:04:00 localhost cli[555]: [cli.INFO]: user admin: Executing command: show ip route static
Dec 22 20:05:09 localhost cli[555]: [cli.INFO]: user admin: CLI got signal 2 (SIGINT)
May 22 20:06:44 localhost cli[555]: [cli.INFO]: user admin: Executing command: show limit bandwidth
May 22 20:06:49 localhost cli[555]: [cli.INFO]: user admin: CLI got signal 2 (SIGINT)Related Commands
logging
show papi rest access_codes
Displays the REST API settings.
Syntax
show papi rest access_codesUsage Guidelines
Use this command to display the access code settings used to gain access to REST APIs.
Examples
amnesiac # show papi rest access_codes
ID: b6c1efd5-a20b-4784-b2f2-44bedc9bc107
Desc: example
Creator: admin
Code:eyJhdWQiOiAiaHR0cHM6Ly9wZXJmNC1zaDQubGFiLm5idHRlY2guY29tL2FwaS9jb21tb24vMS4wL3Rva2VuIiwgImlzcyI6ICJodHRwczovL3BlcmY0LXNoNC5sYWIubmJ0dGVjaC5jb20iLCAicHJuIjogImFkbWluIiwgImp0aSI6ICJiNmMxZTQ3ODQtYjJmMi00NGJlZGM5YmMxMDciLCAiZXhwIjogIjAiLCAiaWF0IjogIjEzNjM5Nzk4OTIifQ==Related Commands
show remote ip
Displays the current IP network settings for the remote management port.
Syntax
show remote ipExamples
amnesiac # show remote ipshow running-config
Displays the running configuration settings that differ from the defaults.
Syntax
show running-config [ full ]Parameters
fullDisplays all settings, including those set to the default value.
Examples
amnesiac # show running-config
(displays running configuration)Related Commands
show telnet-server
Displays Telnet server settings.
Syntax
show telnet-serverExamples
amnesiac # show telnet-server
TCP reordering enabled: no
TCP reordering threshold: 3Related Commands
show userlog
Displays current user log file in a scrollable pager.
Syntax
show userlog [ continuous | files file-number ]Parameters
continuousDisplays new user log messages as they occur.
files file-numberDisplays archived user log files.
Examples
amnesiac # show userlog
Oct 17 15:38:54 amnesiac-sh75 cli[26992]: [cli.NOTICE]: user admin: CLI launched
Oct 17 15:39:00 amnesiac-sh75 cli[26992]: [cli.INFO]: user admin: Executing command:
enable
Oct 17 17:18:03 amnesiac-sh75 cli[26992]: [cli.INFO]: user admin: Executing command:
show version
Oct 17 18:00:00 amnesiac-sh75 cli[26992]: [cli.INFO]: user admin: Executing command matching: show rsp slots
Oct 17 18:00:36 amnesiac-sh75 cli[26992]: [cli.INFO]: user admin: Executing command matching: show rsp dataflow RiO
Oct 17 18:00:46 amnesiac-sh75 cli[26992]: [cli.INFO]: user admin: Executing command matching: show rsp dataflow RiOS
Oct 17 18:00:57 amnesiac-sh75 cli[26992]: [cli.INFO]: user admin: Executing command matching: show rsp dataflow inpath0_0
Oct 17 18:01:10 amnesiac-sh75 cli[26992]: [cli.INFO]: user admin: Executing command matching: show rsp images
Oct 17 18:08:22 amnesiac-sh75 cli[26992]: [cli.INFO]: user admin: Executing command:
show service
Oct 17 18:11:18 amnesiac-sh75 cli[26992]: [cli.INFO]: user admin: Executing command: show smb signing delegation domains
*** this is partial display ***Related Commands
logging
show usernames
Displays a list of user accounts.
Syntax
show usernames username [ detailed ]Parameters
detailedDisplays specified user details.
Examples
*** show list of user names ***
amnesiac # show usernames
User Expire Lock Failures Comment
-------------------------------------------------------------------------------
@admin Never Never 0
john Never Never 0
david Never Never 0
*james Never Never 0
-monitor N/A N/A N/A
-------------------------------------------------------------------------------
@ = current user, * = also logged in, - = disabled,
! = locked out due to failed logins
*** show details for a listed user ***
amnesiac # show usernames monitor detailed
User monitor details
Current User: No
Logged In: No
Disabled: Yes
Password Change: N/A
Password Expired: N/A
Account Locked: N/A
Login Failure Lock Out: N/A
Login Failure Count: N/A
Last Login Failure: N/A
Comment:Related Commands
stats clear-all
Clears data for all samples, computed history data points (CHDs), and status for all alarms.
Syntax
stats clear-allExamples
amnesiac # stats clear-allRelated Commands
tcpdump
Executes the tcpdump utility. You can quickly diagnose problems and take traces for Brocade Technical Support. The tcpdump command takes the standard Linux options. For detailed information, see the Linux man page.
Syntax
tcpdump [ options ] [ filter-string ]Parameters
options
The tcpdump command takes the standard Linux options:
- a: Attempt to convert network and broadcast addresses to names.
- c: Exit after receiving count packets.
- d: Dump the compiled packet matching code in a human readable form to standard output and stop.
- dd: Dump packet matching code as a C program fragment.
- ddd: Dump packet matching code as decimal numbers preceded with a count).
- e: Print the linklevel header on each dump line.
- E: Use secret algorithm for decrypting IPsec ESP packets.
- f: Print foreign Internet addresses numerically rather than symbolically.
- F: Use file as input for the filter expression. An additional expression given on the command line is ignored.
- i: Listen on interface. If unspecified, tcpdump searches the system interface list for the lowest numbered, configured up interface.
- n: Do not convert addresses, such as host addresses and port numbers to names.
- N: Do not print domain name qualification of hostnames. For example, if you specify this flag, then tcpdump will print nic instead of nic.ddn.mil.
- m: Load SMI MIB module definitions from file module. This option can be used several times to load several MIB modules into tcpdump.
- q: Quiet output. Print less protocol information so output lines are shorter.
- r: Read packets from created with the -w option.
- S: Print absolute, not relative, TCP sequence numbers.
- v: (Slightly more) verbose output. For example, the time to live, identification, total length and options in an IP packet are printed. Also enables additional packet integrity checks such as verifying the IP and ICMP header checksum.
- w: Write the raw packets to a file rather than parsing and printing them out. They ca later be printed with the -r option. Standard output is used if file is -.
- x: Print each packet without its link level header in hexadecimal format. The smaller of the entire packet or bytes will be printed.
- X: When printing hex, print ASCII too. Thus if -x is also set, the packet is printed in hex/ASCII. This option enables you to analyze new protocols.
For detailed information, see the Linux man page.
Usage Guidelines
Make sure you take separate tcpdumps for the LAN and WAN to submit to Ivanti Support. Make sure you take the tcpdump on the in-path interface.
The most common options are:
- -n Do not resolve addresses via DNS
- -i <interface> capture on <interface>
- To take traces on lanX_Y and wanX_Y, not inpathX_Y:
- -e display layer 2 headers, MAC addresses, and VLAN tags
- -s <bytes> capture up to <bytes> bytes per packet
- The default is 96 bytes; not enough for deep packet inspection for Ivanti Support, instead use:
- -s 0 to capture full frames
- -w <file> store the trace in <file> (needed when taking traces for offline analysis)
Common packet filters:
- src host <ip> - source IP address is <ip>
- dst host <ip> - destination IP address is <ip>
- host <ip> - either source or destination is <ip>
- Same for src port, dst port, and port
- Can connect multiple filters together with logical operators: and, or, and not. Use parentheses to override operator precedence.
For example:
tcpdump -i lan0_0 not port 22
tcpdump -i lan0_0 host 1.1.1.1 and port 2222
tcpdump -i wan0_0 host 3.3.3.3 and (port 4444 or port 5555)Suppose two appliances are having a problem optimizing a connection:
Client IP = 10.10.10.10
Client SH IP = 10.10.10.20
Server IP = 11.11.11.11
Server SH IP = 11.11.11.21Take traces on all LAN/WAN interfaces on both appliances to diagnose:
C-SH# tcpdump -n -i lan0 host 10.10.10.10 and host 11.11.11.11
C-SH# tcpdump -n -i wan0_0 (host 10.10.10.10 and host 11.11.11.11) or
(host 10.10.10.20 and host 11.11.11.21)
S-SH# tcpdump -n -i lan0 host 10.10.10.10 and host 11.11.11.11
S-SH# tcpdump -n -i wan0_0 (host 10.10.10.10 and host 11.11.11.11) or
(host 10.10.10.20 and host 11.11.11.21)Keep the tcpdump running and establish a connection.
If the problem is not obvious, use -w to capture to files, and examine in a tool like Wireshark. Sometimes you can capture very large traces of data and traffic you are interested in is a small subset of the entire trace. To work around this problem, run tcpdump through its own trace to cut down on the number of packets. Use the -r <file> option, to read from a file instead of capture on an interface
tcpdump -n -r my_trace.cap -w my_filtered_trace.cap host 5.5.5.5 and port 2323The following example captures both VLAN tagged and untagged traffic on destination port 7850 and ARP packets:
tcp -i lan0_0 ((port 7850 or arp) or (vlan and (port 7850 or arp)))Examples
amnesiac # tcpdump
tcpdump: listening on primary
18:59:13.682568 amnesiac.domain.com.ssh > dhcp-22.domain.com.3277: P
3290808290:3290808342(52) ack 3412262693 win 5840 (DF) [dscp 0x10]
18:59:13.692513 amnesiac.domain.com.ssh > dhcp-22.domain.com.3277: P 0:52(52) ack
1 win 5840 (DF) [dscp 0x10]
18:59:13.702482 amnesiac.domain.com.ssh > dhcp-22.domain.com.3277: P 0:52(52) ack
1 win 5840 (DF) [dscp 0x10]