[c-nsp] IP Packet Debug - FIB errors

luismi asturluismi at gmail.com
Tue Jan 19 07:41:50 EST 2010


I dont think so, "debug ip packet" is ok if you use a very specific ACL,
IMHO.

I found very dangerous "debug ip nat detailed", I saw 7200 down because
of that command without too many nat :-P

El mar, 19-01-2010 a las 12:24 +0000, Dobbins, Roland escribió:
> On Jan 19, 2010, at 6:25 PM, Andre Schoppmeier wrote:
> 
> > Just have a question regarding FIB errors during packet debugging:
> 
> FYI, IP packet debug is generally considered to be too dangerous for use on production boxes - it's a huge risk in terms of self-DoSing the router(s) in question.  
> 
> -----------------------------------------------------------------------
> Roland Dobbins <rdobbins at arbor.net> // <http://www.arbornetworks.com>
> 
>     Injustice is relatively easy to bear; what stings is justice.
> 
>                         -- H.L. Mencken
> 
> 
> 
> _______________________________________________
> cisco-nsp mailing list  cisco-nsp at puck.nether.net
> https://puck.nether.net/mailman/listinfo/cisco-nsp
> archive at http://puck.nether.net/pipermail/cisco-nsp/




More information about the cisco-nsp mailing list