Juniper JUNOS OS 10.3 - SOFTWARE Manual page 3936

Complete Software Guide for Junos
monitor traffic
extensive
(Relative Sequence)
monitor traffic
extensive count
monitor traffic
interface
monitor traffic
matching
monitor traffic (TX
Matrix Plus Router)
3840
®
OS for EX Series Ethernet Switches, Release 10.3
user@host> monitor traffic extensive no-domain-names no-resolve no-timestamp count 20
matching "tcp"
listening on fxp0
In 172.24.248.221.1680 > 192.168.4.210.23: . 396159737:396159737(0) ack 1664980689
win 17574 (DF) (ttl 121, id 50003)
Out 192.168.4.210.23 > 172.24.248.221.1680: P 1:40(39) ack 0 win 17680 (DF) [tos
0x10] (ttl 64, id 5394)
In 207.17.136.193.179 > 192.168.4.227.1024: P 4042775817:4042775874(57) ack
1845416593 win 16384 <nop,nop,timestamp 4935379 965690>: BGP [|BGP UPDAT)
...
user@host> monitor traffic extensive count 5 no-domain-names no-resolve
listening on fxp013:18:17.406933 In 192.168.4.206.2723610880 > 172.17.28.8.2049:
40 null (ttl 64, id 38367)13:18:17.407577
192.168.4.206.2723610880: reply ok 28 null (ttl 61, id 35495)13:18:17.541140
0:e0:1e:42:9c:e0 0:e0:1e:42:9c:e0 9000 60:
0000 0000 0000 0000 0000 0000
0000 0000 0000
000013:18:17.591513 In 172.24.248.156.4139 > 192.168.4.210.23: .
3556964918:3556964918(0) ack 295526518 win 17601 (DF) (ttl 121, id
14)13:18:17.591568 Out 192.168.4.210.23 > 172.24.248.156.4139: P 1:40(39) ack 0
win 17680 (DF) [tos 0x10]
user@host> monitor traffic interface fxp0
listening on fxp0.0
18:17:28.800650 In server.home.net.723 > host1-0.lab.home.net.log
18:17:28.800733 Out host2-0.lab.home.net.login > server.home.net.7
18:17:28.817813 In host30.lab.home.net.syslog > host40.home0
18:17:28.817846 In host30.lab.home.net.syslog > host40.home0
...
user@host> monitor traffic matching "net 192.168.1.0/24"
verbose output suppressed, use <detail> or <extensive> for full protocol decode
Address resolution is ON. Use <no-resolve> to avoid any reverse lookup delay.
Address resolution timeout is 4s.
Listening on fxp0, capture size 96 bytes
Reverse lookup for 192.168.1.255 failed (check DNS reachability).
Other reverse lookup failures will not be reported.
Use no-resolve to avoid reverse lookups on IP addresses.
21:55:54.003511 In IP truncated-ip - 18 bytes missing! 192.168.1.17.netbios-ns
> 192.168.1.255.netbios-ns: UDP, length 50
21:55:54.003585 Out IP truncated-ip - 18 bytes missing! 192.168.1.17.netbios-ns
> 192.168.1.255.netbios-ns: UDP, length 50
21:55:54.003864 In arp who-has 192.168.1.17 tell 192.168.1.9
...
user@host> monitor traffic
verbose output suppressed, use <detail> or <extensive> for full protocol decode
Address resolution is ON. Use <no-resolve> to avoid any reverse lookup delay.
Address resolution timeout is 4s.
Listening on em0, capture size 96 bytes
04:11:59.862121 Out IP truncated-ip - 25 bytes missing!
summit-em0.englab.juniper.net.syslog > sv-log-01.englab.juniper.net.syslog: SYSLOG
kernel.info, length: 57
04:11:59.862303 Out IP truncated-ip - 25 bytes missing!
summit-em0.englab.juniper.net.syslog > sv-log-02.englab.juniper.net.syslog: SYSLOG
kernel.info, length: 57
In 172.17.28.8.2049 >
0000 0000 0000 0000 0000 0000
(ttl 64, id 52376)
Copyright © 2010, Juniper Networks, Inc.
0000 0100
0000 0000 0000 0000 0000
In