Enabling Tcp Dumps - Dell C9000 Series Networking Configuration Manual

Hide thumbs Also See for C9000 Series:

Table of Contents

timestamp is a text string in the format: yyyyddmmhhmmss (YearDayMonthHourMinuteSecond).

To disable the full kernel and other core dumps, enter the no logging coredump command.

The Kernel full core dump name in RPM's uses the following formats:

Kernel full core dump generated from CP of the RPMs

f10Ch<Chassis ID>_rpm<0/1>_cp_<timestamp>.kcore.gz

Kernel full core dump from RP application

f10Ch<Chassis ID>_rpm<0/1>_rp_<timestamp>.kcore.gz

Kernel full core dump from LP application

f10Ch<Chassis ID>_lp<slot#>_<timestamp>.kcore.gz

Enabling TCP Dumps

A TCP dump captures CPU-bound control-plane traffic to improve troubleshooting and system

manageability. You can perform a TCP dump on the Control Processor (CP) and Route Processor (RP) CPUs.

When you enable TCP dumps, a dump captures all the packets on the local CPU, as specified in the CLI.

You can save the traffic capture files to flash, to FTP, SCP, or TFTP. The files saved on the flash are located in

the flash://TCP_DUMP_DIR/tcpdump_<time_stamp_dir>/ directory and are labeled tcpdump_*.pcap. There

can be up to 20 tcpdump_<time_stamp_dir> directories. The file after 20 overwrites the oldest saved file. The

maximum file size for a TCP dump capture is 1MB. When a file reaches 1MB, a new file is created, up to the

specified total number of files.

Maximize the number of packets recorded in a file by specifying the snap-length to capture the file headers

The tcpdump command has a finite run process. When you enable the command, it runs until the capture-

duration timer and/or the packet-count counter threshold is met. If you do not set a threshold, the system

uses a default of 5 minute capture-duration and/or a single 1k file as the stopping point for the dump.

You can use the capture-duration timer and the packet-count counter at the same time. The TCP dump

stops when the first of the thresholds are met. That means that even if the duration timer is 9000 seconds, if

the maximum file count parameter is met first, the dumps stop.

Enable a TCP dump for CPU bound traffic.

CONFIGURATION mode

tcpdump {cp | rp} [capture-duration time | filter expression | max-file-count

value | packet-count value | snap-length value | write-to path]

Debugging and Diagnostics