Dell Force10 S4810P Configuration Manual page 905

Creating a trace list
Trace lists filter and log traffic based on source and destination IP addresses, IP host addresses, TCP
addresses, TCP host addresses, UDP addresses, and UDP host addresses. When configuring the Trace list
filters, include the
Since traffic passes through the filter in the order of the filter ' s sequence, you can configure the trace list by
first entering the TRACE LIST mode and then assigning a sequence number to the filter.
To create a filter for packets with a specified sequence number, use these commands in the following
sequence, starting in the CONFIGURATION mode:
Step Command Syntax
1
ip trace-list trace-list-name
2
seq sequence-number
ip-protocol-number
} {
host ip-address
} [
host ip-address
To create a filter for TCP packets with a specified sequence number, use these commands in the following
sequence, starting in the CONFIGURATION mode:
Step Command Syntax
1
ip trace-list trace-list-name
and parameters so that any hits to that filter are logged.
count bytes
{
{ | }
deny permit ip |
} { | |
any
source mask
| |
any
destination mask
[ ] | ]
count byte log
Command Mode Purpose
CONFIGURATION Enter the TRACE LIST mode by creating
an trace list.
TRACE LIST Configure a drop or forward filter.
Configure the following required and
optional parameters:
•
•
•
•
•
•
•
•
•
•
•
Command Mode Purpose
CONFIGURATION Create a trace list and assign it a unique
name.
range: 0 to,
sequence-number
4294967290.
: to specify IP as the protocol to filter
ip
for.
range: 0 to 255.
ip-protocol-number
: An IP address as the source IP
source
address for the filter to match.
a network mask
mask:
: to match any IP source address
any
to match IP addresses
host ip-address:
in a host.
: An IP address as the source
destination
IP address for the filter to match.
count packets processed by the
count:
filter.
count bytes processed by the filter.
byte:
is supported.
log:
Security | 905