Allowed/dropped packets log – Brocade Mobility RFS Controller CLI Reference Guide (Supporting software release 5.5.0.0 and later) User Manual

Page 1345

Brocade Mobility RFS Controller CLI Reference Guide

1337

53-1003098-01

Software fallback feature is enabled

System bootup time (via /proc/uptime) was 126.10 92.38

Please press Enter to activate this console. Feb 07 20:47:33 2013: %DOT11-5-COUNTRY_CODE:
Country of operation configured to in [India]

Feb 07 20:47:34 2013: %DIAG-6-NEW_LED_STATE: LED state message AP_LEDS_ON from module
DOT11

Feb 07 20:47:34 2013: KERN: vlan1: add 01:00:5e:00:00:01 mcast address to master interface.

Feb 07 20:47:34 2013: %NSM-4-IFUP: Interface vlan2 is up

Feb 07 20:47:34 2013: KERN: vlan2: add 01:00:5e:00:00:01 mcast address to master interface.

Feb 07 20:47:34 2013: %NSM-4-IFUP: Interface vlan172 is up

Feb 07 20:47:34 2013: KERN: vlan172: add 01:00:5e:00:00:01 mcast address to master
interface.

Feb 07 20:47:34 2013: %DAEMON-3-ERR: dhcrelay: interface allocate: vlan1

Feb 07 20:47:34 2013: %PM-6-PROCSTART: Starting process "/usr/sbin/sshd"

Feb 07 20:47:34 2013: %DAEMON-3-ERR: dhcrelay: idataplane enabled

Interface allocatCCB:21:Firewall enabled

Interface : vlan1

Feb 07 20:47:34 2013: %DAEMON-3-ERR: dhcrelay: interface allocate : vlan2

Feb 07 20:47:34 2013: %KERN-4-WARNING: dataplane enabled.

Feb 07 20:47:34 2013: %DATAPLANE-5-FWSTARTUP: Firewall enabled.

Feb 07 20:47:39 2013: %DATAPLANE-5-LOGRULEHIT: Matched ACL:ftpuser:ip Rule:0
Disposition:Drop Packet Src MAC:<00-19-B9-6B-DA-77> Dst MAC:<00-15-70-81-91-6A>
Ethertype:0x0800 Src IP:192.168.1.99 Dst IP:192.168.1.1 Proto:6 Src Port:3327 DstPort:22.

Allowed/Dropped Packets Log

The following example displays disposition information regarding allow/deny packets:

Allow Packets

CCB:0:Matched ACL:ftpuser:ip Rule:1 Disposition:Allow Packet Src MAC:<00-11-25-14-D9-E2> Dst
MAC:<00-15-70-81-91-6A> Ethertype:0x0800 Src IP:192.168.2.102 Dst IP:192.168.2.1 Proto:17
Src Port:137 Dst Port:137

CCB:Feb 07 18:14:32 2013: %DATAPLAN:-5-LOGRULEHIT: Matched ACL:ftpuer:aip Rule:1
Ditcposition:Allow hedacket Src MAC: 00-11-25-14-D9-A2> Dst MAC:<00-5-70-81-9C1-6A>
thertLype:0x0800:Src IP:192.168..102 Dsft IP:192t168.2.1 Proto:1p Src Port:137 Dut Port:137.

ser:ip Rule:1 Disposition:Allow Packet Src MAC:<00-11-25-14-D9-E2> Dst
MAC:<00-15-70-81-91-6A> Ethertype:0x0800 Src IP:192.168.2.102 Dst IP:192.168.2.1 Proto:17
Src Port:1029 Dst Port:53