networking-forum.com
Community Blog • Community Wiki * Register  * Search  * Login
View unanswered posts • View active topics

Board index » Cisco Networking » Cisco General

All times are UTC - 6 hours [ DST ]


Post new topic Reply to topic  Page 1 of 1
  [ 12 posts ] 
  Print view Previous topic | Next topic 
Author Message
m4rtin
PostPosted: Tue Jun 26, 2012 11:14 am 
Offline
Senior Member
Senior Member
User avatar

Joined: Thu Sep 17, 2009 3:06 pm
Posts: 272
Is there a way to debug syslog messages? Something like "debug ip syslog"?
Top
 Profile  
 
mlan
PostPosted: Tue Jun 26, 2012 4:35 pm 
Offline
Senior Member
Senior Member
User avatar

Joined: Thu Nov 17, 2011 6:09 pm
Posts: 487
Location: Portland, OR
debug logging?
Top
 Profile  
 
jdsilva
PostPosted: Tue Jun 26, 2012 4:47 pm 
Offline
Post Whore
Post Whore
User avatar

Joined: Mon Jan 17, 2005 11:01 pm
Posts: 5148
Location: Canada eh
Certs: 350-001, CCNP, CXFF, ITILv3F
Debug logging? There isn't anything to debug in logging.. Logging is debugging.

What are you trying to do?

_________________
blog.brokennetwork.ca
Top
 Profile  
 
m4rtin
PostPosted: Tue Jun 26, 2012 4:52 pm 
Offline
Senior Member
Senior Member
User avatar

Joined: Thu Sep 17, 2009 3:06 pm
Posts: 272
mlan wrote:
debug logging?


At least on a Cisco 2811(c2800nm-advipservicesk9-mz.124-11.XW7.bin) there is no such option as "debug logging":

Code:
Cisco2811-12-4#debug logging
                      ^
% Invalid input detected at '^' marker.

Cisco2811-12-4#



Infinite wrote:
Debug logging? There isn't anything to debug in logging.. Logging is debugging.

What are you trying to do?


I would like to ensure that my router sends out syslog messages. According to "show logging" output it should do this. I guess only option here is to make an ACL and check the counters?
Top
 Profile  
 
jdsilva
PostPosted: Tue Jun 26, 2012 4:55 pm 
Offline
Post Whore
Post Whore
User avatar

Joined: Mon Jan 17, 2005 11:01 pm
Posts: 5148
Location: Canada eh
Certs: 350-001, CCNP, CXFF, ITILv3F
Why not just check the the Syslog server?

_________________
blog.brokennetwork.ca
Top
 Profile  
 
mlan
PostPosted: Tue Jun 26, 2012 5:16 pm 
Offline
Senior Member
Senior Member
User avatar

Joined: Thu Nov 17, 2011 6:09 pm
Posts: 487
Location: Portland, OR
Infinite wrote:
Why not just check the the Syslog server?


Indeed, unless you don't have one? There are plenty of free syslog servers out there.

Alternately, you could sniff for syslog packets (seems like overkill, but hey).
Top
 Profile  
 
m4rtin
PostPosted: Tue Jun 26, 2012 6:22 pm 
Offline
Senior Member
Senior Member
User avatar

Joined: Thu Sep 17, 2009 3:06 pm
Posts: 272
mlan wrote:
Infinite wrote:
Why not just check the the Syslog server?


Indeed, unless you don't have one? There are plenty of free syslog servers out there.

Alternately, you could sniff for syslog packets (seems like overkill, but hey).


The problem is that syslog server receives no traffic from this host :) I'm able to ping syslog server from router, but if I tcpdump in the server it receives no UDP traffic while according to router it sends to syslog server UDP port 514. Both router and server are in remote locations and access is over public Internet.
I was just wondering maybe there is a way to debug syslog traffic like it's possible to debug for example ICMP or GRE traffic :roll: If there isn't I'll create an ACL for outgoing UDP port 514 traffic and check the counters.
Top
 Profile  
 
jdsilva
PostPosted: Tue Jun 26, 2012 6:56 pm 
Offline
Post Whore
Post Whore
User avatar

Joined: Mon Jan 17, 2005 11:01 pm
Posts: 5148
Location: Canada eh
Certs: 350-001, CCNP, CXFF, ITILv3F
See, this is good info you should share initally :)

Try a traceroute from the router to the Syslog server on UDP 514. See if anything is blocking it.

The output of 'show logg' should show how many messages the router thinks it's sent. If you want to do an ACL you'll have to do it on another device as outbound ACLs don't catch traffic generated by the router itself.

_________________
blog.brokennetwork.ca
Top
 Profile  
 
Perlhack
PostPosted: Thu Jun 28, 2012 8:53 am 
Offline
Member
Member
User avatar

Joined: Wed Aug 19, 2009 7:22 pm
Posts: 220
Location: VA
Certs: CCNP CCIP CCNA-S
Debugging is priority 7 in syslog and the router defaults to informational if memory serves. To get the debugs to transmit over the network then:

C1811(config)#logging trap debugging

_________________
_______________________________________________________________________
There are 10 types of people in the world. Those who understand binary and those who don't.
Top
 Profile  
 
m4rtin
PostPosted: Wed Jul 04, 2012 5:54 pm 
Offline
Senior Member
Senior Member
User avatar

Joined: Thu Sep 17, 2009 3:06 pm
Posts: 272
Infinite wrote:
If you want to do an ACL you'll have to do it on another device as outbound ACLs don't catch traffic generated by the router itself.


Ok, but is there some technique/method to ACL traffic generated by the router itself?
Top
 Profile  
 
mellowd
PostPosted: Thu Jul 05, 2012 1:51 am 
Offline
CCIE #38070
CCIE #38070
User avatar

Joined: Wed Jun 18, 2008 7:49 am
Posts: 12424
Location: London, UK
Certs: CCIE ,CC-NP/IP, JNCIP-SP, JNCIS-ENT, BC-/SPNE/NP
Stick a switch in front of the router and span the port. Run tcpdump/wireshark

_________________
www.mellowd.co.uk/ccie/
Top
 Profile  
 
m4rtin
PostPosted: Fri Jul 06, 2012 6:49 am 
Offline
Senior Member
Senior Member
User avatar

Joined: Thu Sep 17, 2009 3:06 pm
Posts: 272
mellowd wrote:
Stick a switch in front of the router and span the port. Run tcpdump/wireshark


This isn't possible in this case because router is connected directly to ISP VDSL2 converter in a remote location.
Top
 Profile  
 
Display posts from previous:  Sort by  
Post new topic Reply to topic  Page 1 of 1
  [ 12 posts ] 

Board index » Cisco Networking » Cisco General

All times are UTC - 6 hours [ DST ]

Who is online

Users browsing this forum: No registered users and 6 guests

You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  
Powered by phpBB® Forum Software © phpBB Group