vyos/vyos-documentation
1
0
Fork 0
mirror of https://github.com/vyos/vyos-documentation.git synced 2025-10-26 08:41:46 +01:00
Code Issues Packages Projects Releases Wiki Activity

troubleshooting: remove old monitor interfaces command

Browse Source 
remove monitor interfaces command and replace tshark with tcpdump
This commit is contained in:
currite 2020-01-17 01:40:37 +01:00 committed by Christian Poessinger
parent 9ee929766b
commit f0106f6a5c
1 changed files with 58 additions and 65 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

123
docs/troubleshooting.rst
View File

@ -88,81 +88,74 @@ to the VyOS command prompt.
Monitoring Monitoring
---------- ----------
Network Interfaces VyOS features several monitoring tools.
^^^^^^^^^^^^^^^^^^
It's possible to monitor network traffic, either at the flow level or protocol
level. This can be useful when troubleshooting a variety of protocols and
configurations. The following interface types can be monitored:
.. code-block:: none .. code-block:: none
vyos@vyos:~$ monitor interfaces vyos@vyos:~$ monitor
Possible completions: Possible completions:
<Enter> Execute the current command bandwidth Monitor interface bandwidth in real time
bonding Monitor a bonding interface bandwidth-test
bridge Monitor a bridge interface Initiate or wait for bandwidth test
ethernet Monitor a ethernet interface cluster Monitor clustering service
loopback Monitor a loopback interface command Monitor an operational mode command (refreshes every 2 seconds)
openvpn Monitor an openvpn interface conntrack-sync
pppoe Monitor pppoe interface Monitor conntrack-sync
pseudo-ethernet content-inspection
Monitor a pseudo-ethernet interface Monitor Content-Inspection
tunnel Monitor a tunnel interface dhcp Monitor Dynamic Host Control Protocol (DHCP)
vrrp Monitor a vrrp interface dns Monitor a Domain Name Service (DNS) daemon
vti Monitor a vti interface firewall Monitor Firewall
wireless Monitor wireless interface https Monitor the Secure Hypertext Transfer Protocol (HTTPS) service
lldp Monitor Link Layer Discovery Protocol (LLDP) daemon
log Monitor last lines of messages file
nat Monitor network address translation (NAT)
openvpn Monitor OpenVPN
protocol Monitor routing protocols
snmp Monitor Simple Network Management Protocol (SNMP) daemon
stop-all Stop all current background monitoring processes
traceroute Monitor the path to a destination in realtime
traffic Monitor traffic dumps
vpn Monitor VPN
vrrp Monitor Virtual Router Redundancy Protocol (VRRP)
webproxy Monitor Webproxy service
To monitor traffic flows, issue the :code:`monitor interfaces <type> <name> flow`
command, replacing `<type>` and `<name>` with your desired interface type and Traffic Dumps
name, respectively. Output looks like the following: ^^^^^^^^^^^^^
To monitor interface traffic, issue the :code:`monitor traffic interface <type> <name>`
command, replacing `<type>` and `<name>` with your desired interface
type and name, respectively.
.. code-block:: none .. code-block:: none
12.5Kb 25.0Kb 37.5Kb 50.0Kb 62.5Kb vyos@vyos:~$ monitor traffic interface eth0
???????????????????????????????????????????????????????????????????????????????????????????????????? tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
10.11.111.255 => 10.11.110.37 0b 0b 0b listening on eth0, link-type EN10MB (Ethernet), capture size 262144 bytes
<= 624b 749b 749b 15:54:28.581601 IP 192.168.0.1 > vyos: ICMP echo request, id 1870, seq 3848, length 64
10.11.110.29 => 10.62.200.11 0b 198b 198b 15:54:28.581660 IP vyos > 192.168.0.1: ICMP echo reply, id 1870, seq 3848, length 64
<= 0b 356b 356b 15:54:29.583399 IP 192.168.0.1 > vyos: ICMP echo request, id 1870, seq 3849, length 64
255.255.255.255 => 10.11.110.47 0b 0b 0b 15:54:29.583454 IP vyos > 192.168.0.1: ICMP echo reply, id 1870, seq 3849, length 64
<= 724b 145b 145b ^C
10.11.111.255 => 10.11.110.47 0b 0b 0b 4 packets captured
<= 724b 145b 145b 4 packets received by filter
10.11.111.255 => 10.11.110.255 0b 0b 0b 0 packets dropped by kernel
<= 680b 136b 136b vyos@vyos:~$
????????????????????????????????????????????????????????????????????????????????????????????????????
TX: cumm: 26.7KB peak: 40.6Kb rates: 23.2Kb 21.4Kb 21.4Kb
RX: 67.5KB 63.6Kb 54.6Kb 54.0Kb 54.0Kb
TOTAL: 94.2KB 104Kb 77.8Kb 75.4Kb 75.4Kb
Several options are available for changing the display output. Press `h` to
invoke the built in help system. To quit, just press `q` and you'll be returned
to the VyOS command prompt.
To monitor interface traffic, issue the :code:`monitor interfaces <type> <name>
traffic` command, replacing `<type>` and `<name>` with your desired interface
type and name, respectively. This command invokes the familiar tshark_ utility
and the following options are available:
.. code-block:: none
vyos@vyos:~$ monitor interfaces ethernet eth0 traffic
Possible completions:
<Enter> Execute the current command
detail Monitor detailed traffic for the specified ethernet interface
filter Monitor filtered traffic for the specified ethernet interface
save Save monitored traffic to a file
unlimited Monitor traffic for the specified ethernet interface
To quit monitoring, press `Ctrl-c` and you'll be returned to the VyOS command To quit monitoring, press `Ctrl-c` and you'll be returned to the VyOS command
prompt. The `detail` keyword provides verbose output of the traffic seen on prompt.
the monitored interface. The `filter` keyword accepts valid `PCAP filter
expressions`_, enclosed in single or double quotes (e.g. "port 25" or "port 161 Traffic can be filtered and saved.
and udp"). The `save` keyword allows you to save the traffic dump to a file.
The `unlimited` keyword is used to specify that an unlimited number of packets .. code-block:: none
can be captured (by default, 1,000 packets are captured and you're returned to
the VyOS command prompt). vyos@vyos:~$ monitor traffic interface eth0
Possible completions:
<Enter> Execute the current command
filter Monitor traffic matching filter conditions
save Save traffic dump from an interface to a file
Interface Bandwidth Interface Bandwidth
^^^^^^^^^^^^^^^^^^^ ^^^^^^^^^^^^^^^^^^^