Bookmark this page:
Yahoo!
Windows Live
del.icio.us
digg
Netscape
|
|
||||||||||||||||
|
Posted by jh3ang on March 22, 2007, 5:53 pm
Please log in for more thread options Please anybody tell me that what those debug outputs mean,. For example, when I read below debug outputs, I understand that "src" is source, and "dst" is destination. "debug arp" *Mar 1 00:06:09.619: IP ARP: creating incomplete entry for IP address: 192.1.1.1 interface Ethernet0/1 *Mar 1 00:06:09.619: IP ARP: sent req src 172.16.39.3 00b0.64cb.eab1, dst 192.1.1.1 0000.0000.0000 Ethernet0/1 *Mar 1 00:06:09.635: IP ARP rep filtered src 192.1.1.1 0010.7b81.0b19, dst 172.16.39.3 00b0.64cb.eab1 wrong cable, interface Ethernet0/1 what is "rep" means ? Is there any explanation or book or reference about debug output ? It looks complex, and I feel like I'm reading password messages.. | ||||||||||||||||
|
Posted by Barry Margolin on March 22, 2007, 9:45 pm
Please log in for more thread options Before sending an ARP request, the router creates an entry in the ARP cache for the address it needs to resolve. It's an incomplete entry because it doesn't have the MAC address filled in yet. > *Mar 1 00:06:09.619: IP ARP: sent req src 172.16.39.3 00b0.64cb.eab1,
> dst 192.1.1.1 0000.0000.0000 Ethernet0/1 Then it sends an ARP request, with the specified source and destination IP and MAC addresses, over interface Ethernet0/1. > *Mar 1 00:06:09.635: IP ARP rep filtered src 192.1.1.1
> 0010.7b81.0b19, dst 172.16.39.3 > 00b0.64cb.eab1 wrong cable, interface Ethernet0/1 It received an ARP reply and filtered it for some reason that it calls "wrong cable". I guess it means that it didn't expect it to be on that interface, but I'm not sure why since it's the same interface it sent it through. It's weird that the router is ARPing for addresses that aren't in the same subnet as the interface. Do you have a default route pointing to Ethernet0/1? >
> > what is "rep" means ? "req" and "rep" are request and reply. > Is there any explanation or book or reference about debug output ? It
> looks complex, and I feel like I'm reading password messages.. You can probably find web sites that will explain a few common debug lines, but I don't think there's any complete reference. The assumption is that if you know enough to troubleshoot a network you should be able to figure out what the debug output means. -- Barry Margolin, barmar@alum.mit.edu Arlington, MA *** PLEASE post questions in newsgroups, not directly to me *** *** PLEASE don't copy me on replies, I'll read them in the group *** | ||||||||||||||||
| Similar Threads | Posted |
| what does debug outputs mean ? | March 22, 2007, 5:53 pm |
| IOS Debug | August 15, 2005, 3:39 am |
| Pix debug, get more out of it | June 15, 2005, 7:41 am |
| Debug QoS cos & dscp | September 13, 2005, 5:50 pm |
| debug packets on PIX with 7.0 | October 11, 2005, 12:19 am |
| Cisco Pix debug help | March 19, 2006, 5:37 am |
| debug ip packet | September 1, 2006, 7:56 pm |
| PIX 501 vpdn debug help | December 11, 2006, 10:15 pm |
| Pix Debug Commands | April 10, 2008, 2:34 pm |
| debug frame-relay lmi | October 25, 2005, 1:42 am |
| filtering debug output | June 19, 2005, 7:04 pm |
| How to debug this ping response ??? | September 4, 2006, 12:14 am |
| Cisco ADU 3.5 Debug logging | March 1, 2007, 10:01 am |
| request help with VPN cryptomap debug | April 3, 2007, 2:15 pm |
| Cisco 515 - Debug flood | April 22, 2008, 3:31 am |

what does debug outputs mean ?
Yahoo!
Windows Live
del.icio.us
digg
Netscape 


> Please anybody tell me that what those debug outputs mean,.
> For example, when I read below debug outputs, I understand that "src"
> is source, and "dst" is destination.
>
> "debug arp"
> *Mar 1 00:06:09.619: IP ARP: creating incomplete entry for IP
> address: 192.1.1.1 interface Ethernet0/1