Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

  • Congratulations wOOdy-Soft on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

other ip packet handle?

Status
Not open for further replies.

boodox

MIS
Sep 24, 2002
54
GB
I;ve just done a debug on traffic going through a netscreen and I'm getting a debug with the following. Does anyone have any idea why?

****** 43264.0: <Trust/ethernet8> packet received [40]******
ipid = 35670(8b56), @d78ea910
other ip packet handle.
****** 43264.0: <AP/ethernet5> packet received [40]******
ipid = 35670(8b56), @d789d110
other ip packet handle.
****** 43274.0: <Trust/ethernet8> packet received [48]******
ipid = 35676(8b5c), @d78e0910
other ip packet handle.
****** 43274.0: <AP/ethernet5> packet received [48]******
ipid = 35676(8b5c), @d7894110
other ip packet handle.
****** 43274.0: <Trust/ethernet8> packet received [40]******
ipid = 35678(8b5e), @d78e1110
other ip packet handle.
****** 43274.0: <AP/ethernet5> packet received [40]******
ipid = 35678(8b5e), @d7894910
other ip packet handle.
****** 43274.0: <Trust/ethernet8> packet received [1039]******
ipid = 35679(8b5f), @d78e1910
other ip packet handle.
****** 43274.0: <AP/ethernet5> packet received [1039]******




I'm expecting something more in the line of:


****** 43264.0: <Trust/ethernet8> packet received [40]******
ipid = 35670(8b56), @d78ea910
trust:192.168.132.7/1433->192.168.10.1/23,6<Root>
existing session found. sess token 2
flow got session.
flow session id 62
post addr xlation: 192.168.132.7->192.168.10.1.

I'd appreciate it if anyone had any ideas.

thanks

tav
 
boodox

What you have there is just a basic out put of the.
get dbuf stream command.The section posted below shows mssql ms-sql traffic from 192.168.132.7 node to 192.168.10.1

Remember that when a packet arrives on an interface a route lookup will be performed. And if there is an existing session.If you want more debugging information use the snoop command.




****** 43264.0: <Trust/ethernet8> packet received [40]******
ipid = 35670(8b56), @d78ea910
trust:192.168.132.7/1433->192.168.10.1/23,6<Root>
existing session found. sess token 2
flow got session.
flow session id 62
post addr xlation: 192.168.132.7->192.168.10.1.

 
Status
Not open for further replies.

Part and Inventory Search

Sponsor

Back
Top