Viewing Log Files; Packet Capture - ShoreTel 4500 Installation Manual

Chapter 5
Following is an example of the CLI output for the "traceroute" command.
5.1.4

Viewing Log Files

When debugging problems, it is helpful to view the system message logs. These files can be
provided to the ShoreTel support team for debugging purposes. In addition, ShoreTel' s
remote system log server information can help the ShoreTel support team further analyze a
problem. If more information is required for debugging purposes, read the
Capture" section below.
•
To view system messages, issue the command:
tail –f /var/log/messages
•
To view Stunnel-related messages, issue the command:
tail -f /var/log/stunnel_history.log
5.1.5

Packet Capture

Packet capture capability can be used to capture packets and analyze them for debugging
purposes. This capability is only available through the CLI. Packets can be filtered for
capture by on the basis of host, port, interface, etc. The captured packets are stored in a file
on a RAM disk in the VPN Concentrator with the extension "pcap". Packets can be
captured on eth0 (LAN port), eth1 (WAN port), and pppX (where X is a positive integer).
pppX is the interface that is associated with a remote phone.
5.1.5.1 Capturing Packets for an Individual SSL Connection
Packets will need to be captured on eth0, eth1, and pppN (where N is a positive integer) for
an individual SSL connection. To capture the packets for a given SSL VPN connection:
VPN Concentrator Installation and Configuration Guide
Figure 5-6 traceroute Command Results
Figure 5-7 tcmpdump Command Results
Tools and Troubleshooting
"Packet
59