ZyXEL Communications ZyWALL USG Series, Reference Manual

Page: 379 / 426

ZyWALL / USG (ZLD) CLI Reference Guide
379
C
H A P T E R
5 9
Maintenance Tools
Use the maintenance tool commands to check the conditions of other devices through the ZyWALL
/ USG. The maintenance tools can help you to troubleshoot network problems.
Here are maintenance tool commands that you can use in privilege mode.
Table 229
Maintenance Tools Commands in Privilege Mode
COMMAND DESCRIPTION
packet-trace [interface interface_name ]
[[ip-proto|ipv6-proto] | protocol_name
| any}] [src-host { ip | hostname |
any}] [dst-host { ip | hostname | any}]
[port {<1..65535> | any}] [file]
[duration <1..3600>] [extension-filter
filter_extension ]
Sniffs traffic going through the specified interface with the specified
protocol, source address, destination address, and/or port number.
If you specify
file
, the ZyWALL / USG dumps the traffic to
/
packet_trace/packet_trace_interface
. Use FTP to retrieve
the files (see Section 53.7 on page 345 ).
If you do not assign the duration, the ZyWALL / USG keeps dumping traffic
until you use Ctrl-C.
Use the extension filter to extend the use of this command.
protocol_name
: You can use the name, instead of the number, for some IP
protocols, such as
tcp
,
udp
,
icmp
, and so on. The names consist of 1-16
alphanumeric characters or dashes (-). The first character cannot be a
number.
hostname
: You can use up to 252 alphanumeric characters, dashes (-), or
periods (.). The first character cannot be a period.
filter_extension
: You can use 1-256 alphanumeric characters, spaces,
or '()+,/:=?;!*#@$_%.- characters.
traceroute { ip | hostname }
Displays the route taken by packets to the specified destination. Use
Ctrl+c
to return to the prompt.
traceroute6 { ipv6 | hostname }
Displays the route taken by packets to the specified destination. Use
Ctrl+c
to return to the prompt.
[no] packet-capture activate
Performs a packet capture that captures network traffic going through the
set interface(s). Studying these packet captures may help you identify
network problems.
The
no
command stops the running packet capture on the ZyWALL / USG.
Note: Use the
packet-capture configure
command to configure the
packet-capture settings before using this command.
packet-capture configure
Enters the sub-command mode.
duration <0..300>
Sets a time limit in seconds for the capture. The ZyWALL / USG stops the
capture and generates the capture file when either this period of time has
passed or the file reaches the size specified using the
files-size
command below. 0 means there is no time limit.