Enable-Mode Commands
Entering enable-mode
You can perform basic system administration tasks in enable mode. Only administrator users can perform enable-mode commands. All commands available in user mode are also available in enable mode.
Configuration-Mode Commands describes some enable commands because they are more easily understood in relationship to the feature set of which they are a part.
To enter enable mode:
1.Connect to the CLI and enter the following command:
login as: admin
Brocade Services Director
Last login: Wed Jan 20 13:02:09 2012 from 10.0.1.1
gen1-sh139 > enable
gen1-sh139 #
2.To exit enable mode, enter exit. For information about the exit command, see ping.
All the commands available in user mode are also available in enable mode.
For an alphabetical list of Enable-Mode commands, see the Contents page of this book.
Enable-Mode Commands
The following section contains the Services Director commands.
For an alphabetical list of Enable-Mode commands, see the Table of Contents for this guide.
clear arp-cache
Clears dynamic entries from the ARP cache. This command does not clear static entries.
Syntax
clear arp-cache
Examples
amnesiac # clear arp-cache
Related Commands
clear hardware edac-ue-alarm
Clears Acknowledge EDAC UE (uncorrectable errors) Alarm.
Syntax
clear hardware edac-ue-alarm
Usage Guidelines
The amber LED light stops blinking on the system.
Examples
amnesiac # clear hardware edac-ue-alarm
Related Commands
clear hardware error-log
Clears IPMI System Event Log (SEL).
Syntax
clear hardware error-log
Usage Guidelines
The amber LED light stops blinking on the system.
Examples
amnesiac # clear hardware error-log
Related Commands
clock set
Sets the system date and time.
Syntax
clock set { yyyy/mm/dd/ hh:mm:ss }
Parameters
yyyy/mm/dd/ hh:mm:ss
Specify the date and time (year, month, day, hour, minutes, and seconds).
Examples
amnesiac # clock set 2003/12/31 23:59:59
Related Commands
configure terminal
Enables configuration from the terminal by entering the configuration subsystem. You must execute the Services Director command first to enter configuration mode.
Syntax
[no] configure terminal
Usage Guidelines
To exit the configuration subsystem, type exit.
The no command option disables the terminal configuration.
Examples
amnesiac # configure terminal
Related Commands
disable
Exits enable mode.
Syntax
disable
Examples
amnesiac # disable
Related Commands
file stats delete
Deletes the statistics file.
Syntax
file stats delete filename
Parameters
filename
Specify the name of the file to delete.
Examples
amnesiac # file stats delete throughput
Related Commands
file stats move
Renames the statistics file.
Syntax
file stats move source-filename destination-filename
Parameters
source-filename
Specify the source file to rename.
destination-filename
Specify the new filename.
Examples
amnesiac # file stats move throughput throughput2
Related Commands
file stats upload
Uploads a specified statistics report file to a remote host.
Syntax
file stats upload filename { destination | case-number }
Parameters
filename
Mandatory. Specify the source filename to upload.
destination
Mandatory. Specify the upload protocol, authentication credentials, remote host, and host filepath for the remote file. Supported protocols are HTTP, FTP and SCP.
There is no default setting for this property.
case-number
Mandatory. Specify the customer case number.
Examples
amnesiac # file stats upload throughput ftp://admin:[email protected]/stats 194170
Related Commands
file tcpdump delete
Deletes a TCP dump output file.
Syntax
file tcpdump delete filename
Parameters
filename
Specify the tcpdump file to delete.
Examples
amnesiac # file tcpdump delete dumpfile
Related Commands
file tcpdump upload
Uploads a specific TCP dump output file to a remote host.
Syntax
file tcpdump upload filename { destination | case-number }
Parameters
filename
Mandatory. Specify the source filename to upload.
destination
Mandatory. Specify the upload protocol, authentication credentials, remote host, and host filepath for the remote file. Supported protocols are HTTP, FTP and SCP.
There is no default setting for this property.
case-number
Mandatory. Specify the customer case number.
Examples
amnesiac # file tcpdump upload dumpfile http://www.test.com/stats 194171
Related Commands
file upload clear-stats
Clears the file upload statistics.
Syntax
file upload clear-stats
Usage Guidelines
The file upload clear-stats command clears the statistics displayed by the show uploads command.
Examples
amnesiac > file upload clear-stats
Related Commands
file upload stop
Stops an upload.
Syntax
file upload stop
Usage Guidelines
The file upload stop command stops an upload of a resource.
Examples
amnesiac > file upload stop
Related Commands
image delete
Deletes the specified software image.
Syntax
image delete image-filename
Parameters
image-filename
Specify the name of the software image to delete.
Examples
amnesiac # image delete snkv1.0
Related Commands
image delete-all
Deletes all software image files on the disk.
Syntax
image delete-all
Examples
amnesiac # image delete-all
Related Commands
image fetch
Downloads a software image from a remote host.
Syntax
image fetch URL, -scp://, or -ftp://username:password@hostname/path/filename image-filename
Parameters
URL,-scp://, or -ftp://username:password@hostname/path/filename
Specify the upload protocol, the location, and authentication credentials for the remote image file.
Press the Enter key to download the image. The image retains the same name it had on the server.
image-filename
Specify a local filename for the image.
Examples
amnesiac # image fetch http://www.domain.com/v.1.0 version1.0
Related Commands
image install
Installs the software image onto a system partition.
Syntax
image install image-filename partition
Parameters
image-filename
Specify the software image filename to install.
partition
Specify the partition number: 1, 2.
Examples
amnesiac # image install version1.0 2
Related Commands
image move
Moves or renames an inactive system image on the hard disk.
Syntax
image move source-image-name new-image-name
Parameters
source-image-name
Specify the name of the software image to move or rename.
new-image-name
Specify the new name of the software image.
Examples
amnesiac # image move www.domain.com/v.1.0 version1.0
Related Commands
image upgrade
Installs a system image on the backup boot partition.
Syntax
image upgrade image-name
Parameters
image-name
Specify the software image filename to install.
Usage Guidelines
The image upgrade command only installs the image on the backup boot partition.
Examples
amnesiac # image upgrade image187.img
Related Commands
ntpdate
Conducts a one-time synchronization with a specified NTP server.
Syntax
ntpdate ip-addr
Parameters
ip-addr
Specify the NTP server with which to synchronize.
Examples
amnesiac # ntpdate 10.10.10.1
Related Commands
reload
Reboots the system.
Syntax
reload [ halt ]|[ force ]
Parameters
halt
Shuts down the system.
force
Forces an immediate reboot of the system even if it is busy.
Usage Guidelines
After this command is used, the master password is required.
•If you chose to store the master password in the Services Director when it was installed, the master password is used automatically, and the Services Director service restarts automatically.
•If you DID NOT choose to store the master password in the Services Director when it was installed, the Services Director service is initially unavailable. To resolve this, you must re-enter the master password using the VA GUI. This is not possible using the CLI. After this is done, the Services Director service restarts.
Examples
amnesiac # reload
The session will close. It takes about 2-3 minutes to reboot the appliance.
Related Commands
disable, ssc kpti, show ssc kpti
show arp
Displays the contents of the ARP cache. The ARP cache includes all statically configured ARP entries, as well as any that the system has acquired dynamically.
Syntax
show arp [ static ]
Parameters
static
Displays static ARP addresses.
Examples
amnesiac # show arp
ARP cache contents
IP 10.0.0.1 maps to MAC 00:07:E9:70:20:15
IP 10.0.0.2 maps to MAC 00:05:5D:36:CB:29
IP 10.0.100.22 maps to MAC 00:07:E9:55:10:09
Related Commands
show banner
Displays the banner settings.
Syntax
show banner
Examples
amnesiac # show banner
Banners:
MOTD:
Issue: Pulse Services Director
Net Issue: Brocade Services Director
Related Commands
show configuration
Displays the current and saved configuration settings that differ from the default settings.
Syntax
show configuration [ full ]
Parameters
full
Displays all CLI commands and does not exclude commands that set default values.
Examples
amnesiac # show configuration
##
## Network interface configuration
##
no interface aux dhcp
interface aux duplex "auto"
no interface aux shutdown
interface aux speed "auto"
interface primary ip address 10.0.0.3 /16
##
## Routing configuration
##
ip default-gateway "10.0.0.1"
##
## Other IP configuration
##
hostname "amnesiac"
ip domain-list domain.com
ip domain-list domain.com
ip name-server 10.0.0.2
##
## Logging configuration
##
logging local "info"
##
## Process Manager configuration
##
pm process mgmtd launch timeout "4000"
pm process sport shutdown order "0"
pm process statsd shutdown order "0"
##
## Network management configuration
##
## Miscellaneous other settings (this is a partial list of settings)
Related Commands
show configuration files
Displays the list of active and backup configuration files or the contents of a specified file.
Syntax
show configuration [ filename ]
Parameters
filename
Specify the filename. The default filenames are:
•initial: Specify the initial configuration.
•initial.bak: Specify the initial backup configuration.
•cold: Specify the configuration file before SDR has occurred.
•working (active): Specify the current configuration.
•working.bak: Specify the current backup configuration.
Examples
amnesiac # show configuration files initial
##
## Network interface configuration
##
no interface aux dhcp
interface aux duplex "auto"
interface aux ip address 10.0.62.75 /16
interface aux mtu "1500"
no interface aux shutdown
interface aux speed "auto"
interface aux txqueuelen "100"
no interface primary dhcp
##
## Routing configuration
##
ip default-gateway "10.0.0.1"
##
## Logging configuration
##
logging 10.1.10.200
logging 10.1.10.200 trap "info"
*** this is a partial display ***
Related Commands
show configuration
Displays running configuration settings that are different from the defaults.
Syntax
show configuration running [ full ]
Parameters
running
Displays system CLI commands to recreate current running configuration.
full
Displays all system CLI commands and does not exclude commands that set default values.
Examples
amnesiac # show configuration running
##
## Network interface configuration
##
no interface aux dhcp
interface aux duplex "auto"
interface aux ip address 10.0.62.75 /16
interface aux mtu "1500"
no interface aux shutdown
interface aux speed "auto"
interface aux txqueuelen "100"
no interface inpath0_0 dhcp
interface inpath0_0 duplex "auto"
interface inpath0_0 ip address 10.11.62.75 /16
interface inpath0_0 mtu "1500"
no interface inpath0_0 shutdown
interface inpath0_0 speed "auto"
interface inpath0_0 txqueuelen "100"
no interface lan0_0 dhcp
interface lan0_0 duplex "auto"
interface lan0_0 mtu "0"
no interface lan0_0 shutdown
interface lan0_0 speed "auto"
interface lan0_0 txqueuelen "100"
lines 1-23
##(displays running configuration; this is a partial list of settings.)
Related Commands
show files events config
Displays events configuration.
Syntax
show files events config
Examples
amnesiac # show files events config
Related Commands
show files process-dump
Displays a list of crash dump files.
Syntax
show files process-dump
Examples
amnesiac # show files process-dump
Related Commands
show files stats
Displays performance statistics files.
Syntax
show files stats
Usage Guidelines
You export performance statistics to files using the stats export command.
Examples
amnesiac # show files stats
Related Commands
show files tcpdump
Displays files saved by the tcpdump utility.
Syntax
show files tcpdump
Examples
amnesiac # show files tcpdump
unopt.cap
big-noopt.cap
big-opt.cap
big.tgz
big-opt2.cap
Related Commands
show fips status
Displays FIPS status information by feature.
Syntax
show fips status
Examples
amnesiac > show fips status
CMC Autoregistration: Should not be configured in FIPS mode.
Citrix Basic Encryption: Should not be configured in FIPS mode.FIPS Mode: Disabled. You must save the configuration and reload the system to enable FIPS mode.
Related Commands
show hardware all
Displays hardware information such as the current slot configuration.
Syntax
show hardware all
Examples
amnesiac # show hardware all
Hardware Revision: B
Mainboard: Series 3000/5000 motherboard, ................. CMP-00072
Slot 0: 4 Port Copper GigE Network Bypass Card, ....... CMP-00074
Slot 1: (Empty)
Slot 2: (Empty)
Slot 3: (Empty)
Slot 4: 6 Port SATA RAID I/O Card, .................... CMP-00014
Slot 5: (Empty)
Related Commands
show interfaces
Displays the running state settings and statistics for specific interfaces.
Syntax
show interfaces interface_name [ arp | arp static | brief | configured | dhcp-lease ]
Parameters
interface_name
Specify the interface name. For example, aux, lan0_0, wan0_0, primary, in-path0_0, lo.
arp
Displays static and dynamic ARP entries for this interface.
arp static
Displays statically-configured ARP entries for this interface.
brief
Displays the running state settings without statistics.
configured
Displays configured settings for the interface.
dhcp-lease
Displays DHCP lease for this interface.
Usage Guidelines
The settings and statistics displayed varies when using DHCP.
See also show interfaces brief and show interfaces configured.
Examples
*** show brief details loopback interface ***
amnesiac # show interfaces lo brief
Interface lo state
Up: yes
Interface type: loopback
IP address: 127.0.0.1
Netmask: 255.0.0.0
IPv6 address: ::1/128
Speed: N/A
Duplex: N/A
MTU: 16436
HW address: N/A
Link: yes
Counters cleared date: 2017/10/26 07:18:57
*** show full details for loopback interface ***
amnesiac # show interfaces lo configured
Interface lo configuration
Enabled: yes
DHCP: no
Dynamic DNS DHCP: no
DHCPv6: no
Dynamic DNS DHCPv6: no
IP address: 127.0.0.1
Netmask: 255.0.0.0
Speed: auto
Duplex: auto
MTU: 16436
Counters cleared date: 2017/10/26 07:18:57
amnesiac # show interfaces lo
Interface lo state
Up: yes
Interface type: loopback
IP address: 127.0.0.1
Netmask: 255.0.0.0
IPv6 address: ::1/128
Speed: N/A
Duplex: N/A
MTU: 16436
HW address: N/A
Link: yes
Counters cleared date: 2017/10/26 07:18:57
RX bytes: 82972572
RX packets: 342912
RX mcast packets: 0
RX discards: 0
RX errors: 0
RX overruns: 0
RX frame: 0
TX bytes: 82972572
TX packets: 342912
TX discards: 0
TX errors: 0
TX overruns: 0
TX carrier: 0
TX collisions: 0
*** show primary interface ***
amnesiac # show interfaces primary arp
ARP cache contents
IP 10.62.132.37 maps to MAC 44:31:92:5D:90:42
IP 10.62.128.30 maps to MAC 00:0C:29:41:DD:6C
IP 10.62.128.1 maps to MAC 00:10:DB:FF:10:04
IP 10.62.167.197 maps to MAC 00:50:56:A6:64:F4
IP 10.62.169.163 maps to MAC 00:50:56:A6:6F:93
*** show aux interface ***
amnesiac # show interfaces aux
Interface aux state
Up: yes
Interface type: ethernet
IP address:
Netmask:
IPv6 link-local address: fe80::250:56ff:fea6:195c/64
Speed: 1000Mb/s (auto)
Duplex: full (auto)
MTU: 1500
HW address: 00:50:56:A6:19:5C
Link: yes
Counters cleared date: 2017/10/26 07:18:57
RX bytes: 39112481
RX packets: 625959
RX mcast packets: 0
RX discards: 0
RX errors: 0
RX overruns: 0
RX frame: 0
TX bytes: 4338
TX packets: 51
TX discards: 0
TX errors: 0
TX overruns: 0
TX carrier: 0
TX collisions: 0
Related Commands
show interfaces brief
Displays brief running state for all interfaces
Syntax
show interfaces brief
Usage Guidelines
The settings and statistics displayed varies when using DHCP.
See also show interfaces and show interfaces configured.
Examples
amnesiac # show interfaces brief
Interface primary state
Up: yes
Interface type: ethernet
IP address: 10.62.169.160
Netmask: 255.255.192.0
IPv6 link-local address: fe80::250:56ff:fea6:539/64
Speed: 1000Mb/s (auto)
Duplex: full (auto)
MTU: 1500
HW address: 00:50:56:A6:05:39
Link: yes
Counters cleared date: 2017/10/26 07:18:57
Interface aux state
Up: yes
Interface type: ethernet
IP address:
Netmask:
IPv6 link-local address: fe80::250:56ff:fea6:195c/64
Speed: 1000Mb/s (auto)
Duplex: full (auto)
MTU: 1500
HW address: 00:50:56:A6:19:5C
Link: yes
Counters cleared date: 2017/10/26 07:18:57
Related Commands
show interfaces configured
Displays configuration for all interfaces.
Syntax
show interfaces configured
Usage Guidelines
The settings and statistics displayed varies when using DHCP.
See also show interfaces and show interfaces brief.
Examples
amnesiac # show interfaces configured
Interface aux configuration
Enabled: yes
DHCP: yes
Dynamic DNS DHCP: no
DHCPv6: no
Dynamic DNS DHCPv6: no
IP address: 169.254.1.1
Netmask: 255.255.0.0
IPv6 address:
Speed: auto
Duplex: auto
MTU: 1500
Counters cleared date: 2013/11/02 01:06:10
Interface lo configuration
Enabled: yes
DHCP: no
Dynamic DNS DHCP: no
DHCPv6: no
Dynamic DNS DHCPv6: no
IP address: 127.0.0.1
Netmask: 255.0.0.0
Speed: auto
Duplex: auto
MTU: 16436
Counters cleared date: 2013/11/02 01:06:10
Interface primary configuration
Enabled: yes
DHCP: no
Dynamic DNS DHCP: no
DHCPv6: no
Dynamic DNS DHCPv6: no
IP address:
Netmask:
IPv6 address:
Speed: auto
Duplex: auto
MTU: 1500
Counters cleared date: 2013/11/02 01:06:10
Related Commands
show ip default-gateway
Displays the IP default gateway.
Syntax
show ip default-gateway [ static ]
Parameters
static
Displays the static default gateway.
Examples
amnesiac # show ip default-gateway static
Configured default gateway: 10.0.0.1
Related Commands
show ipv6 default-gateway
Displays the IPv6 default gateway.
Syntax
show ipv6 default-gateway [ static ]
Parameters
static
Displays the static default gateway.
Examples
amnesiac # show ipv6 default-gateway static
Configured default gateway: 2001:38dc:52::e9a4:c5:6282/64
Related Commands
show ipv6 route
Displays active IPv6 routes, both dynamic and static.
Syntax
show ipv6 route [ static ]
Parameters
static
Displays the static default gateway.
Examples
amnesiac # show ipv6 route
Destination Network Gateway Interface
::1/128 :: lo
2000::/64 :: primary
2001::20e:b6ff:fe01:58f1/128 :: lo
2001::/60 :: aux
2001::/60 :: primary
fe80::200:ff:fe00:0/128 :: lo
fe80::200:ff:fe00:0/128 :: lo
[partial example]
Related Commands
show ip route
Displays active routes both dynamic and static.
Syntax
show ip route [ static ]
Parameters
static
Displays configured static routes.
Examples
amnesiac # show ip route static
Destination Mask Gateway
default 0.0.0.0 10.0.0.4
Related Commands
show job
Displays the status of a scheduled job.
Syntax
show job job-id
Parameters
job-id
Specify the job identification number.
Examples
amnesiac # show job 10
job {job_id}: 10
Status: pending
Name: myjob
Comment: this is a text
Absolute range:
Commands:
show info.
show connections.
show version.
Related Commands
show jobs
Displays a list of all jobs.
Syntax
show jobs
Examples
amnesiac # show jobs
% No jobs configured.
Related Commands
show licenses
Displays VLAB licenses, used for "root" access to the SSC host. Customers do not typically have access to VLAB licenses.
Syntax
show licenses
Examples
amnesiac # show licenses
Local: LK1-VLAB-0000-0000-1-3E83-2754-8910
Index: 1
Feature: VLAB
Valid: yes
Active: yes
Start date:
End date:
show log
Displays the system logs.
Syntax
show log [ continuous | files log-number | reverse | matching ]
Parameters
continuous
Displays the log continuously, similar to the Linux tail -f command.
files log-number
Displays a list of log files or a specific log file.
reverse
Displays the log information, in reverse order, with the latest entry at the top.
matching
Displays a list of matching log files.
Examples
amnesiac # show log
May 22 20:00:00 localhost /usr/sbin/crond[784]: (root) CMD (/usr/sbin/logrotate /etc/logrotate.conf)
May 22 20:00:00 localhost cli[555]: [cli.INFO]: user admin: CLI got signal 2 (SIGINT)
May 22 20:02:31 localhost cli[555]: [cli.INFO]: user admin: Executing command: show ip route
May 22 20:02:38 localhost cli[555]: [cli.INFO]: user admin: CLI got signal 2 (SIGINT)
Dec 22 20:03:16 localhost cli[555]: [cli.INFO]: user admin: CLI got signal 2 (SIGINT)
May 22 20:04:00 localhost cli[555]: [cli.INFO]: user admin: Executing command: show ip route static
Dec 22 20:05:09 localhost cli[555]: [cli.INFO]: user admin: CLI got signal 2 (SIGINT)
May 22 20:06:44 localhost cli[555]: [cli.INFO]: user admin: Executing command: show limit bandwidth
May 22 20:06:49 localhost cli[555]: [cli.INFO]: user admin: CLI got signal 2 (SIGINT)
Related Commands
show papi rest access_codes
Displays the REST API settings.
Syntax
show papi rest access_codes
Usage Guidelines
Use this command to display the access code settings used to gain access to REST APIs.
Examples
amnesiac # show papi rest access_codes
ID: b6c1efd5-a20b-4784-b2f2-44bedc9bc107
Desc: example
Creator: admin
Code:eyJhdWQiOiAiaHR0cHM6Ly9wZXJmNC1zaDQubGFiLm5idHRlY2guY29tL2FwaS9jb21tb24vMS4wL3Rva2VuIiwgImlzcyI6ICJodHRwczovL3BlcmY0LXNoNC5sYWIubmJ0dGVjaC5jb20iLCAicHJuIjogImFkbWluIiwgImp0aSI6ICJiNmMxZTQ3ODQtYjJmMi00NGJlZGM5YmMxMDciLCAiZXhwIjogIjAiLCAiaWF0IjogIjEzNjM5Nzk4OTIifQ==
Related Commands
show remote ip
Displays the current IP network settings for the remote management port.
Syntax
show remote ip
Examples
amnesiac # show remote ip
show running-config
Displays the running configuration settings that differ from the defaults.
Syntax
show running-config [ full ]
Parameters
full
Displays all settings, including those set to the default value.
Examples
amnesiac # show running-config
(displays running configuration)
Related Commands
show telnet-server
Displays Telnet server settings.
Syntax
show telnet-server
Examples
amnesiac # show telnet-server
TCP reordering enabled: no
TCP reordering threshold: 3
Related Commands
show userlog
Displays current user log file in a scrollable pager.
Syntax
show userlog [ continuous | files file-number ]
Parameters
continuous
Displays new user log messages as they occur.
files file-number
Displays archived user log files.
Examples
amnesiac # show userlog
Oct 17 15:38:54 amnesiac-sh75 cli[26992]: [cli.NOTICE]: user admin: CLI launched
Oct 17 15:39:00 amnesiac-sh75 cli[26992]: [cli.INFO]: user admin: Executing command:
enable
Oct 17 17:18:03 amnesiac-sh75 cli[26992]: [cli.INFO]: user admin: Executing command:
show version
Oct 17 18:00:00 amnesiac-sh75 cli[26992]: [cli.INFO]: user admin: Executing command matching: show rsp slots
Oct 17 18:00:36 amnesiac-sh75 cli[26992]: [cli.INFO]: user admin: Executing command matching: show rsp dataflow RiO
Oct 17 18:00:46 amnesiac-sh75 cli[26992]: [cli.INFO]: user admin: Executing command matching: show rsp dataflow RiOS
Oct 17 18:00:57 amnesiac-sh75 cli[26992]: [cli.INFO]: user admin: Executing command matching: show rsp dataflow inpath0_0
Oct 17 18:01:10 amnesiac-sh75 cli[26992]: [cli.INFO]: user admin: Executing command matching: show rsp images
Oct 17 18:08:22 amnesiac-sh75 cli[26992]: [cli.INFO]: user admin: Executing command:
show service
Oct 17 18:11:18 amnesiac-sh75 cli[26992]: [cli.INFO]: user admin: Executing command: show smb signing delegation domains
*** this is partial display ***
Related Commands
show usernames
Displays a list of user accounts.
Syntax
show usernames username [ detailed ]
Parameters
detailed
Displays specified user details.
Examples
*** show list of user names ***
amnesiac # show usernames
User Expire Lock Failures Comment
-------------------------------------------------------------------------------
@admin Never Never 0
john Never Never 0
david Never Never 0
*james Never Never 0
-monitor N/A N/A N/A
-------------------------------------------------------------------------------
@ = current user, * = also logged in, - = disabled,
! = locked out due to failed logins
*** show details for a listed user ***
amnesiac # show usernames monitor detailed
User monitor details
Current User: No
Logged In: No
Disabled: Yes
Password Change: N/A
Password Expired: N/A
Account Locked: N/A
Login Failure Lock Out: N/A
Login Failure Count: N/A
Last Login Failure: N/A
Comment:
Related Commands
stats clear-all
Clears data for all samples, computed history data points (CHDs), and status for all alarms.
Syntax
stats clear-all
Examples
amnesiac # stats clear-all
Related Commands
show alarm, show running-config
tcpdump
Executes the tcpdump utility. You can quickly diagnose problems and take traces for Brocade Technical Support. The tcpdump command takes the standard Linux options. For detailed information, see the Linux man page.
Syntax
tcpdump [ options ] [ filter-string ]
Parameters
options
The tcpdump command takes the standard Linux options:
•a: Attempt to convert network and broadcast addresses to names.
•c: Exit after receiving count packets.
•d: Dump the compiled packet matching code in a human readable form to standard output and stop.
•dd: Dump packet matching code as a C program fragment.
•ddd: Dump packet matching code as decimal numbers preceded with a count).
•e: Print the linklevel header on each dump line.
•E: Use secret algorithm for decrypting IPsec ESP packets.
•f: Print foreign Internet addresses numerically rather than symbolically.
•F: Use file as input for the filter expression. An additional expression given on the command line is ignored.
•i: Listen on interface. If unspecified, tcpdump searches the system interface list for the lowest numbered, configured up interface.
•n: Do not convert addresses, such as host addresses and port numbers to names.
•N: Do not print domain name qualification of hostnames. For example, if you specify this flag, then tcpdump will print nic instead of nic.ddn.mil.
•m: Load SMI MIB module definitions from file module. This option can be used several times to load several MIB modules into tcpdump.
•q: Quiet output. Print less protocol information so output lines are shorter.
•r: Read packets from created with the -w option.
•S: Print absolute, not relative, TCP sequence numbers.
•v: (Slightly more) verbose output. For example, the time to live, identification, total length and options in an IP packet are printed. Also enables additional packet integrity checks such as verifying the IP and ICMP header checksum.
•w: Write the raw packets to a file rather than parsing and printing them out. They ca later be printed with the -r option. Standard output is used if file is -.
•x: Print each packet without its link level header in hexadecimal format. The smaller of the entire packet or bytes will be printed.
•X: When printing hex, print ASCII too. Thus if -x is also set, the packet is printed in hex/ASCII. This option enables you to analyze new protocols.
For detailed information, see the Linux man page.
Usage Guidelines
Make sure you take separate tcpdumps for the LAN and WAN to submit to Ivanti Support. Make sure you take the tcpdump on the in-path interface.
The most common options are:
•-n Do not resolve addresses via DNS
•-i <interface> capture on <interface>
•To take traces on lanX_Y and wanX_Y, not inpathX_Y:
•-e display layer 2 headers, MAC addresses, and VLAN tags
•-s <bytes> capture up to <bytes> bytes per packet
•The default is 96 bytes; not enough for deep packet inspection for Ivanti Support, instead use:
•-s 0 to capture full frames
•-w <file> store the trace in <file> (needed when taking traces for offline analysis)
Common packet filters:
•src host <ip> - source IP address is <ip>
•dst host <ip> - destination IP address is <ip>
•host <ip> - either source or destination is <ip>
•Same for src port, dst port, and port
•Can connect multiple filters together with logical operators: and, or, and not. Use parentheses to override operator precedence.
For example:
tcpdump -i lan0_0 not port 22
tcpdump -i lan0_0 host 1.1.1.1 and port 2222
tcpdump -i wan0_0 host 3.3.3.3 and (port 4444 or port 5555)
Suppose two appliances are having a problem optimizing a connection:
Client IP = 10.10.10.10
Client SH IP = 10.10.10.20
Server IP = 11.11.11.11
Server SH IP = 11.11.11.21
Take traces on all LAN/WAN interfaces on both appliances to diagnose:
C-SH# tcpdump -n -i lan0 host 10.10.10.10 and host 11.11.11.11
C-SH# tcpdump -n -i wan0_0 (host 10.10.10.10 and host 11.11.11.11) or
(host 10.10.10.20 and host 11.11.11.21)
S-SH# tcpdump -n -i lan0 host 10.10.10.10 and host 11.11.11.11
S-SH# tcpdump -n -i wan0_0 (host 10.10.10.10 and host 11.11.11.11) or
(host 10.10.10.20 and host 11.11.11.21)
Keep the tcpdump running and establish a connection.
If the problem is not obvious, use -w to capture to files, and examine in a tool like Wireshark. Sometimes you can capture very large traces of data and traffic you are interested in is a small subset of the entire trace. To work around this problem, run tcpdump through its own trace to cut down on the number of packets. Use the -r <file> option, to read from a file instead of capture on an interface
tcpdump -n -r my_trace.cap -w my_filtered_trace.cap host 5.5.5.5 and port 2323
The following example captures both VLAN tagged and untagged traffic on destination port 7850 and ARP packets:
tcp -i lan0_0 ((port 7850 or arp) or (vlan and (port 7850 or arp)))
Examples
amnesiac # tcpdump
tcpdump: listening on primary
18:59:13.682568 amnesiac.domain.com.ssh > dhcp-22.domain.com.3277: P
3290808290:3290808342(52) ack 3412262693 win 5840 (DF) [dscp 0x10]
18:59:13.692513 amnesiac.domain.com.ssh > dhcp-22.domain.com.3277: P 0:52(52) ack
1 win 5840 (DF) [dscp 0x10]
18:59:13.702482 amnesiac.domain.com.ssh > dhcp-22.domain.com.3277: P 0:52(52) ack
1 win 5840 (DF) [dscp 0x10]