PG1X WIKI

My Knowledge Base

User Tools

Site Tools


tech:network:cisco:syslog:syslog

syslog

Topology

Physical Lab.

Initial config

  • R1
en
conf t
!
int f0/0
ip addr 172.16.2.1 255.255.255.0
no shut
exit
int f0/1
ip addr 172.16.1.1 255.255.255.0
no shut
exit
!
end
  • R2
en
conf t
!
! ip configuration
int f0/0
ip addr 172.16.2.2 255.255.255.0
no shut
exit
int f0/1
ip addr dhcp
no shut
exit
!
end
  • ASW1
en
conf t
!
! ip configuration
int vlan 1
ip addr 172.16.2.201 255.255.255.0
no shut
exit
!
end

Configuration Overview

service timestamps debug datetime msec localtime show-timezone
service timestamps log datetime msec localtime show-timezone

service sequence-numbers

clock timezone JST 9
ntp server 172.16.2.245

line console 0
logging synchronous
exit

line vty 0 15
logging synchronous
exit

logging buffered 512000

logging host 172.16.2.245

! Normal
!logging trap informational
! Incident
logging trap debugging

logging facility local5

! Switches only
int range f0/1 - 8
logging event link-status
exit
int gig0/1
logging event link-status
exit
  • Default buffer value is 4096 bytes = 4 KiB
  • Cisco preferred value 512000 bytes = 500 KiB
R1(config)#logging trap ?
  <0-7>          Logging severity level
  alerts         Immediate action needed           (severity=1)
  critical       Critical conditions               (severity=2)
  debugging      Debugging messages                (severity=7)
  emergencies    System is unusable                (severity=0)
  errors         Error conditions                  (severity=3)
  informational  Informational messages            (severity=6)
  notifications  Normal but significant conditions (severity=5)
  warnings       Warning conditions                (severity=4)
  <cr>

R1(config)#logging facility ?
  auth    Authorization system
  cron    Cron/at facility
  daemon  System daemons
  kern    Kernel
  local0  Local use
  local1  Local use
  local2  Local use
  local3  Local use
  local4  Local use
  local5  Local use
  local6  Local use
  local7  Local use
  lpr     Line printer system
  mail    Mail system
  news    USENET news
  sys10   System use
  sys11   System use
  sys12   System use
  sys13   System use
  sys14   System use
  sys9    System use
  syslog  Syslog itself
  user    User process
  uucp    Unix-to-Unix copy system

Configuration

  • SAK
/etc/rsyslog.conf
# provides UDP syslog reception
module(load="imudp")
input(type="imudp" port="514")
 
# provides TCP syslog reception
module(load="imtcp")
input(type="imtcp" port="514")
 
$AllowedSender UDP, 127.0.0.1, 172.16.0.0/12
/etc/rsyslog.d/networking.conf
local5.*                          -/var/log/networking/networking-lab.log
✘╹◡╹✘  18-06-01 8:21:27 /home/wnoguchi
% sudo mkdir /var/log/networking
sudo systemctl restart rsyslog
  • R1
en
conf t
!
service timestamps debug datetime msec localtime show-timezone
service timestamps log datetime msec localtime show-timezone
!
service sequence-numbers
!
clock timezone JST 9
ntp server 172.16.2.245
!
line console 0
logging synchronous
exit
!
line vty 0 15
logging synchronous
exit
!
logging buffered 512000
!
logging host 172.16.2.245
!
! Normal
!logging trap informational
! Incident
logging trap debugging
!
logging facility local5
!
end
  • R2
en
conf t
!
service timestamps debug datetime msec localtime show-timezone
service timestamps log datetime msec localtime show-timezone
!
service sequence-numbers
!
clock timezone JST 9
ntp server 172.16.2.245
!
line console 0
logging synchronous
exit
!
line vty 0 15
logging synchronous
exit
!
logging buffered 512000
!
logging host 172.16.2.245
!
! Normal
!logging trap informational
! Incident
logging trap debugging
!
logging facility local5
!
end
  • ASW1
en
conf t
!
service timestamps debug datetime msec localtime show-timezone
service timestamps log datetime msec localtime show-timezone
!
service sequence-numbers
!
clock timezone JST 9
ntp server 172.16.2.245
!
line console 0
logging synchronous
exit
!
line vty 0 15
logging synchronous
exit
!
logging buffered 512000
!
logging host 172.16.2.245

! Normal
!logging trap informational
! Incident
logging trap debugging
!
logging facility local5
!
! Switches only
int range f0/1 - 8
logging event link-status
exit
int gig0/1
logging event link-status
exit
!
end

Verification

R1#sh ntp associations

  address         ref clock       st   when   poll reach  delay  offset   disp
*~172.16.2.245    133.243.238.16   2     15     64     7  1.385 -14.269 1937.9
 * sys.peer, # selected, + candidate, - outlyer, x falseticker, ~ configured
R1#sh ntp status
Clock is synchronized, stratum 3, reference is 172.16.2.245
nominal freq is 250.0000 Hz, actual freq is 250.0000 Hz, precision is 2**24
reference time is DEBB05B2.1683CA85 (08:37:22.087 JST Fri Jun 1 2018)
clock offset is -14.2699 msec, root delay is 11.86 msec
root dispersion is 1961.58 msec, peer dispersion is 1937.98 msec
loopfilter state is 'CTRL' (Normal Controlled Loop), drift is -0.000000102 s/s
system poll interval is 64, last update was 27 sec ago.
R1#sh clock
08:37:56.849 JST Fri Jun 1 2018
R2#sh ntp associations

  address         ref clock       st   when   poll reach  delay  offset   disp
*~172.16.2.245    133.243.238.16   2     51     64     7  1.484  -5.999 1938.4
 * sys.peer, # selected, + candidate, - outlyer, x falseticker, ~ configured
R2#sh ntp status
Clock is synchronized, stratum 3, reference is 172.16.2.245
nominal freq is 250.0000 Hz, actual freq is 250.0000 Hz, precision is 2**24
reference time is DEBB054F.163D3847 (08:35:43.086 JST Fri Jun 1 2018)
clock offset is -5.9991 msec, root delay is 11.96 msec
root dispersion is 3952.18 msec, peer dispersion is 938.86 msec
loopfilter state is 'CTRL' (Normal Controlled Loop), drift is -0.000000022 s/s
system poll interval is 64, last update was 126 sec ago.
R2#sh clock
08:37:56.852 JST Fri Jun 1 2018
ASW1#sh ntp associations

  address         ref clock       st   when   poll reach  delay  offset   disp
*~172.16.2.245    133.243.238.16   2     44     64    17  1.442   1.227  1.776
 * sys.peer, # selected, + candidate, - outlyer, x falseticker, ~ configured
ASW1#sh ntp status
Clock is synchronized, stratum 3, reference is 172.16.2.245
nominal freq is 119.2092 Hz, actual freq is 119.2092 Hz, precision is 2**17
reference time is DEBB0595.0557E33A (08:36:53.020 JST Fri Jun 1 2018)
clock offset is 1.2277 msec, root delay is 11.92 msec
root dispersion is 6.78 msec, peer dispersion is 1.77 msec
loopfilter state is 'CTRL' (Normal Controlled Loop), drift is 0.000000004 s/s
system poll interval is 64, last update was 56 sec ago.
ASW1#sh clock
08:37:56.763 JST Fri Jun 1 2018
R1#ping 172.16.2.201
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 172.16.2.201, timeout is 2 seconds:
..!!!
Success rate is 60 percent (3/5), round-trip min/avg/max = 1/2/4 ms
R1#ping 172.16.2.2
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 172.16.2.2, timeout is 2 seconds:
.!!!!
Success rate is 80 percent (4/5), round-trip min/avg/max = 1/1/1 ms
R1#ping 172.16.2.245
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 172.16.2.245, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 1/1/4 ms
R1#ping 172.16.2.201
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 172.16.2.201, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 1/2/4 ms
R1#debug ntp all
NTP events debugging is on
NTP core messages debugging is on
NTP clock adjustments debugging is on
NTP reference clocks debugging is on
NTP packets debugging is on
R1#
000029: Jun  1 08:47:01.077 JST: NTP message sent to 172.16.2.245, from interface 'FastEthernet0/0' (172.16.2.1).
000030: Jun  1 08:47:01.077 JST: NTP message received from 172.16.2.245 on interface 'FastEthernet0/0' (172.16.2.1).
000031: Jun  1 08:47:01.077 JST: NTP Core(DEBUG): ntp_receive: message received
000032: Jun  1 08:47:01.077 JST: NTP Core(DEBUG): ntp_receive: peer is 0x65AF8308, next action is 1.
000033: Jun  1 08:47:01.077 JST: NTP Core(DEBUG): receive: packet given to process_packet
✘╹◡╹✘  18-06-01 8:45:10 /home/wnoguchi
% ip a s
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
    inet 127.0.0.1/8 scope host lo
       valid_lft forever preferred_lft forever
    inet6 ::1/128 scope host
       valid_lft forever preferred_lft forever
2: enp3s0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP group default qlen 1000
    link/ether f4:30:b9:3c:99:56 brd ff:ff:ff:ff:ff:ff
    inet 192.168.10.21/24 brd 192.168.10.255 scope global dynamic enp3s0
       valid_lft 224119sec preferred_lft 224119sec
    inet6 fe80::de50:dd15:552c:9161/64 scope link
       valid_lft forever preferred_lft forever
3: enx84afec739c0a: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP group default qlen 1000
    link/ether 84:af:ec:73:9c:0a brd ff:ff:ff:ff:ff:ff
    inet 172.16.2.245/24 brd 172.16.2.255 scope global enx84afec739c0a
       valid_lft forever preferred_lft forever
    inet6 fe80::86af:ecff:fe73:9c0a/64 scope link
       valid_lft forever preferred_lft forever
4: wlo1: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc mq state DOWN group default qlen 1000
    link/ether 7c:67:a2:29:00:68 brd ff:ff:ff:ff:ff:ff
✘╹◡╹✘  18-06-01 8:45:12 /home/wnoguchi
% sudo tcpdump -i enx84afec739c0a port 514
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on enx84afec739c0a, link-type EN10MB (Ethernet), capture size 262144 bytes
08:47:02.025459 IP 172.16.2.1.57922 > serial.syslog: SYSLOG local5.debug, length: 122
08:47:02.025933 IP 172.16.2.1.57922 > serial.syslog: SYSLOG local5.debug, length: 125
08:47:02.026432 IP 172.16.2.1.57922 > serial.syslog: SYSLOG local5.debug, length: 88
08:47:02.026934 IP 172.16.2.1.57922 > serial.syslog: SYSLOG local5.debug, length: 109
08:47:02.027432 IP 172.16.2.1.57922 > serial.syslog: SYSLOG local5.debug, length: 98
08:47:30.017552 IP 172.16.2.2.49517 > serial.syslog: SYSLOG local5.debug, length: 122
08:47:30.018032 IP 172.16.2.2.49517 > serial.syslog: SYSLOG local5.debug, length: 125
08:47:30.018543 IP 172.16.2.2.49517 > serial.syslog: SYSLOG local5.debug, length: 88
08:47:30.019055 IP 172.16.2.2.49517 > serial.syslog: SYSLOG local5.debug, length: 109
08:47:30.019650 IP 172.16.2.2.49517 > serial.syslog: SYSLOG local5.debug, length: 98
08:47:39.038207 IP 172.16.2.201.56503 > serial.syslog: SYSLOG local5.debug, length: 114
08:47:39.038562 IP 172.16.2.201.56503 > serial.syslog: SYSLOG local5.debug, length: 117
08:47:39.038939 IP 172.16.2.201.56503 > serial.syslog: SYSLOG local5.debug, length: 88
08:47:39.039337 IP 172.16.2.201.56503 > serial.syslog: SYSLOG local5.debug, length: 109
08:47:39.039712 IP 172.16.2.201.56503 > serial.syslog: SYSLOG local5.debug, length: 98
^C
15 packets captured
15 packets received by filter
0 packets dropped by kernel
#u all
All possible debugging has been turned off
✘╹◡╹✘  18-06-01 8:49:14 /home/wnoguchi
% sudo tail -f /var/log/networking/networking-lab.log
tail: cannot open '/var/log/networking/networking-lab.log' for reading: No such file or directory
tail: no files remaining
✘╹◡╹✘  18-06-01 8:53:54 /home/wnoguchi
% sudo chmod 700 /var/log/networking/
✘╹◡╹✘  18-06-01 8:54:32 /home/wnoguchi
% sudo systemctl restart rsyslog
✘╹◡╹✘  18-06-01 8:55:27 /home/wnoguchi
% sudo ls -ld /var/log
drwxrwxr-x 15 root syslog 4096 Jun  1 08:21 /var/log
✘╹◡╹✘  18-06-01 8:55:45 /home/wnoguchi
% sudo ls -ld /var/log/networking
drwx------ 2 root root 4096 Jun  1 08:21 /var/log/networking
✘╹◡╹✘  18-06-01 8:55:49 /home/wnoguchi
% sudo chmod 775 /var/log/networking
✘╹◡╹✘  18-06-01 8:56:08 /home/wnoguchi
% sudo chown root:syslog /var/log/networking
✘╹◡╹✘  18-06-01 8:55:25 /home/wnoguchi
% sudo tail -f /var/log/networking/networking-lab.log
tail: cannot open '/var/log/networking/networking-lab.log' for reading: No such file or directory
tail: no files remaining
✘╹◡╹✘  18-06-01 8:56:21 /home/wnoguchi
% sudo ls -ld /var/log/networking
drwxrwxr-x 2 root syslog 4096 Jun  1 08:21 /var/log/networking
✘╹◡╹✘  18-06-01 8:56:52 /home/wnoguchi
% sudo systemctl restart rsyslog
✘╹◡╹✘  18-06-01 8:57:02 /home/wnoguchi
% sudo journalctl --unit rsyslog
-- Logs begin at Tue 2018-04-03 06:16:20 JST, end at Fri 2018-06-01 08:57:27 JST. --
Apr 03 06:16:36 serial systemd[1]: Starting System Logging Service...
Apr 03 06:16:40 serial systemd[1]: Started System Logging Service.
Apr 03 07:35:28 serial systemd[1]: Stopping System Logging Service...
Apr 03 07:35:28 serial systemd[1]: Stopped System Logging Service.
-- Reboot --
Apr 03 07:36:24 serial systemd[1]: Starting System Logging Service...
Apr 03 07:36:27 serial systemd[1]: Started System Logging Service.
Apr 04 08:19:52 serial systemd[1]: Stopping System Logging Service...
Apr 04 08:19:52 serial systemd[1]: Stopped System Logging Service.
-- Reboot --
Apr 04 08:20:53 serial systemd[1]: Starting System Logging Service...
Apr 04 08:20:55 serial systemd[1]: Started System Logging Service.
Apr 04 23:23:57 serial systemd[1]: Stopping System Logging Service...
Apr 04 23:23:57 serial systemd[1]: Stopped System Logging Service.
-- Reboot --
Apr 04 23:25:43 serial systemd[1]: Starting System Logging Service...
Apr 04 23:25:44 serial systemd[1]: Started System Logging Service.
Apr 08 17:23:29 serial systemd[1]: Stopping System Logging Service...
Apr 08 17:23:29 serial systemd[1]: Stopped System Logging Service.
-- Reboot --
Apr 08 17:24:28 serial systemd[1]: Starting System Logging Service...
Apr 08 17:24:31 serial systemd[1]: Started System Logging Service.
Apr 15 07:32:06 serial systemd[1]: Stopping System Logging Service...
Apr 15 07:32:07 serial systemd[1]: Stopped System Logging Service.
-- Reboot --
Apr 15 07:33:06 serial systemd[1]: Starting System Logging Service...
Apr 15 07:33:10 serial systemd[1]: Started System Logging Service.
Apr 25 08:38:15 serial systemd[1]: Stopping System Logging Service...
Apr 25 08:38:19 serial systemd[1]: Stopped System Logging Service.
-- Reboot --
Apr 25 08:39:21 serial systemd[1]: Starting System Logging Service...
Apr 25 08:39:24 serial systemd[1]: Started System Logging Service.
Apr 26 09:00:59 serial systemd[1]: Stopping System Logging Service...
Apr 26 09:00:59 serial systemd[1]: Stopped System Logging Service.
Apr 26 09:00:59 serial systemd[1]: Starting System Logging Service...
Apr 26 09:00:59 serial systemd[1]: Started System Logging Service.
Apr 26 09:01:17 serial systemd[1]: Stopping System Logging Service...
Apr 26 09:01:17 serial systemd[1]: Stopped System Logging Service.
Apr 26 09:01:17 serial systemd[1]: Starting System Logging Service...
Apr 26 09:01:17 serial systemd[1]: Started System Logging Service.
May 29 09:09:06 serial systemd[1]: Stopping System Logging Service...
May 29 09:09:07 serial systemd[1]: Stopped System Logging Service.
May 29 09:09:07 serial systemd[1]: Starting System Logging Service...
May 29 09:09:09 serial systemd[1]: Started System Logging Service.
May 29 09:33:16 serial systemd[1]: Stopping System Logging Service...
May 29 09:33:17 serial systemd[1]: Stopped System Logging Service.
-- Reboot --
May 29 09:34:23 serial systemd[1]: Starting System Logging Service...
May 29 09:34:27 serial systemd[1]: Started System Logging Service.
Jun 01 08:21:26 serial systemd[1]: Stopping System Logging Service...
Jun 01 08:21:27 serial systemd[1]: Stopped System Logging Service.
Jun 01 08:21:27 serial systemd[1]: Starting System Logging Service...
Jun 01 08:21:27 serial systemd[1]: Started System Logging Service.
Jun 01 08:22:11 serial systemd[1]: Stopping System Logging Service...
Jun 01 08:22:11 serial systemd[1]: Stopped System Logging Service.
Jun 01 08:22:11 serial systemd[1]: Starting System Logging Service...
Jun 01 08:22:11 serial systemd[1]: Started System Logging Service.
Jun 01 08:45:00 serial systemd[1]: Stopping System Logging Service...
Jun 01 08:45:00 serial systemd[1]: Stopped System Logging Service.
Jun 01 08:45:00 serial systemd[1]: Starting System Logging Service...
Jun 01 08:45:00 serial systemd[1]: Started System Logging Service.
Jun 01 08:49:06 serial systemd[1]: Stopping System Logging Service...
Jun 01 08:49:06 serial systemd[1]: Stopped System Logging Service.
Jun 01 08:49:06 serial systemd[1]: Starting System Logging Service...
Jun 01 08:49:06 serial systemd[1]: Started System Logging Service.
Jun 01 08:53:35 serial systemd[1]: Stopping System Logging Service...
Jun 01 08:53:35 serial systemd[1]: Stopped System Logging Service.
Jun 01 08:53:35 serial systemd[1]: Starting System Logging Service...
Jun 01 08:53:35 serial systemd[1]: Started System Logging Service.
Jun 01 08:54:52 serial systemd[1]: Stopping System Logging Service...
Jun 01 08:54:52 serial systemd[1]: Stopped System Logging Service.
Jun 01 08:54:52 serial systemd[1]: Starting System Logging Service...
Jun 01 08:54:52 serial systemd[1]: Started System Logging Service.
Jun 01 08:56:59 serial systemd[1]: Stopping System Logging Service...
Jun 01 08:56:59 serial systemd[1]: Stopped System Logging Service.
Jun 01 08:56:59 serial systemd[1]: Starting System Logging Service...
Jun 01 08:56:59 serial systemd[1]: Started System Logging Service.
  • R1, R2
router ospf 1
network 172.16.0.0 0.15.255.255 area 0
network 192.168.10.0 0.0.0.255 area 0
<code>

<code>
R2(config-router)#do sh ip int b
Interface                  IP-Address      OK? Method Status                Protocol
FastEthernet0/0            172.16.2.2      YES manual up                    up
FastEthernet0/1            192.168.10.23   YES DHCP   up                    up
Serial0/0/0                unassigned      YES NVRAM  administratively down down
R1#sh ip ro ospf
Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP
       D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
       N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
       E1 - OSPF external type 1, E2 - OSPF external type 2
       i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
       ia - IS-IS inter area, * - candidate default, U - per-user static route
       o - ODR, P - periodic downloaded static route, H - NHRP, l - LISP
       + - replicated route, % - next hop override

Gateway of last resort is not set

O     192.168.10.0/24 [110/2] via 172.16.2.2, 00:00:21, FastEthernet0/0
R1#sh ip ro ospf
Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP
       D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
       N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
       E1 - OSPF external type 1, E2 - OSPF external type 2
       i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
       ia - IS-IS inter area, * - candidate default, U - per-user static route
       o - ODR, P - periodic downloaded static route, H - NHRP, l - LISP
       + - replicated route, % - next hop override

Gateway of last resort is not set

O     192.168.10.0/24 [110/2] via 172.16.2.2, 00:00:21, FastEthernet0/0
R2#sh ip ro ospf
Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP
       D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
       N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
       E1 - OSPF external type 1, E2 - OSPF external type 2
       i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
       ia - IS-IS inter area, * - candidate default, U - per-user static route
       o - ODR, P - periodic downloaded static route, H - NHRP, l - LISP
       + - replicated route, % - next hop override

Gateway of last resort is 192.168.10.1 to network 0.0.0.0

      172.16.0.0/16 is variably subnetted, 3 subnets, 2 masks
O        172.16.1.0/24 [110/2] via 172.16.2.1, 00:01:20, FastEthernet0/0
✘╹◡╹✘  18-06-01 8:57:45 /home/wnoguchi
% sudo tail -f /var/log/networking/networking-lab.log
Jun  1 09:00:10 172.16.2.1 73: 000069: Jun  1 09:00:09.388 JST: %OSPF-5-ADJCHG: Process 1, Nbr 192.168.10.23 on FastEthernet0/0 from LOADING to FULL, Loading Done
Jun  1 09:00:10 172.16.2.2 74: 000070: Jun  1 09:00:09.395 JST: %OSPF-5-ADJCHG: Process 1, Nbr 172.16.2.1 on FastEthernet0/0 from LOADING to FULL, Loading Done
Jun  1 09:01:26 172.16.2.201 124: 000120: Jun  1 09:01:25.714 JST: %SYS-5-CONFIG_I: Configured from console by console
Jun  1 09:01:26 172.16.2.1 74: 000070: Jun  1 09:01:25.875 JST: %SYS-5-CONFIG_I: Configured from console by console
Jun  1 09:01:26 172.16.2.2 75: 000071: Jun  1 09:01:25.881 JST: %SYS-5-CONFIG_I: Configured from console by console
  • R1, R2, ASW1
R1#copy running-config startup-config
Destination filename [startup-config]?
Building configuration...
[OK]
R1#reload
Proceed with reload? [confirm]

000071: Jun  1 09:03:51.487 JST: %SYS-5-RELOAD: Reload requested by console. Reload Reason: Reload Command.



R1#debug ntp all
NTP events debugging is on
NTP core messages debugging is on
NTP clock adjustments debugging is on
NTP reference clocks debugging is on
NTP packets debugging is on
R1#debu
R1#debug ip os
R1#debug ip ospf
% Incomplete command.

R1#debug ip ospf ?
  <1-65535>       Process ID number
  adj             OSPF adjacency
  capability      OSPF capability
  database-timer  OSPF database timer
  demand-circuit  OSPF demand-circuit negotiation
  events          OSPF miscellaneous events
  flood           OSPF flooding
  hello           OSPF hello
  lsa-generation  OSPF LSA generation
  monitor         OSPF SPF monitoring
  mpls            OSPF MPLS
  nsf             OSPF non-stop forwarding
  packet          OSPF received packets
  retransmission  OSPF retransmission
  rib             OSPF RIB
  scheduler       OSPF process scheduling
  spf             OSPF SPF
  tree            OSPF database tree

R1#debug ip ospf events
OSPF events debugging is on
R1#debug ip ospf packet
OSPF packet debugging is on
R1#
000030: Jun  1 09:08:34.550 JST: OSPF-1 PAK  : rcv. v:2 t:1 l:48 rid:172.16.2.2 aid:0.0.0.0 chk:3452 aut:0 auk: from FastEthernet0/0
R1#undebug all
All possible debugging has been turned off
✘╹◡╹✘  18-06-01 8:57:45 /home/wnoguchi
% sudo tail -f /var/log/networking/networking-lab.log
Jun  1 09:00:10 172.16.2.1 73: 000069: Jun  1 09:00:09.388 JST: %OSPF-5-ADJCHG: Process 1, Nbr 192.168.10.23 on FastEthernet0/0 from LOADING to FULL, Loading Done
Jun  1 09:00:10 172.16.2.2 74: 000070: Jun  1 09:00:09.395 JST: %OSPF-5-ADJCHG: Process 1, Nbr 172.16.2.1 on FastEthernet0/0 from LOADING to FULL, Loading Done
Jun  1 09:01:26 172.16.2.201 124: 000120: Jun  1 09:01:25.714 JST: %SYS-5-CONFIG_I: Configured from console by console
Jun  1 09:01:26 172.16.2.1 74: 000070: Jun  1 09:01:25.875 JST: %SYS-5-CONFIG_I: Configured from console by console
Jun  1 09:01:26 172.16.2.2 75: 000071: Jun  1 09:01:25.881 JST: %SYS-5-CONFIG_I: Configured from console by console
Jun  1 09:03:52 172.16.2.201 125: 000121: Jun  1 09:03:50.997 JST: %SYS-5-RELOAD: Reload requested by console. Reload Reason: Reload command.
Jun  1 09:06:14 172.16.2.201 25: 000021: *Mar  1 09:01:12.813 JST: %LINEPROTO-5-UPDOWN: Line protocol on Interface Vlan1, changed state to up
Jun  1 09:06:26 172.16.2.201 26: 000022: Jun  1 09:06:25.314 JST: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0/2, changed state to down
Jun  1 09:06:28 172.16.2.201 27: 000023: Jun  1 09:06:27.319 JST: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0/2, changed state to up
Jun  1 09:06:33 172.16.2.201 28: 000024: Jun  1 09:06:32.671 JST: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0/1, changed state to down
Jun  1 09:06:35 172.16.2.201 29: 000025: Jun  1 09:06:34.675 JST: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0/1, changed state to up
Jun  1 09:07:12 172.16.2.2 24: 000020: *Jun  1 09:07:11.792 JST: %DHCP-6-ADDRESS_ASSIGN: Interface FastEthernet0/1 assigned DHCP address 192.168.10.23, mask 255.255.255.0, hostname R2
Jun  1 09:07:22 172.16.2.1 24: 000020: *Jun  1 09:07:21.383 JST: %OSPF-5-ADJCHG: Process 1, Nbr 172.16.2.2 on FastEthernet0/0 from LOADING to FULL, Loading Done
Jun  1 09:07:22 172.16.2.2 25: 000021: *Jun  1 09:07:21.384 JST: %OSPF-5-ADJCHG: Process 1, Nbr 172.16.2.1 on FastEthernet0/0 from LOADING to FULL, Loading Done
Jun  1 09:07:39 172.16.2.2 26: 000022: *Jun  1 09:07:39.368 JST: NTP message sent to 172.16.2.245, from interface 'FastEthernet0/0' (172.16.2.2).
Jun  1 09:07:39 172.16.2.2 27: 000023: *Jun  1 09:07:39.368 JST: NTP message received from 172.16.2.245 on interface 'FastEthernet0/0' (172.16.2.2).
Jun  1 09:07:39 172.16.2.2 28: 000024: *Jun  1 09:07:39.368 JST: NTP Core(DEBUG): ntp_receive: message received
Jun  1 09:07:39 172.16.2.2 29: 000025: *Jun  1 09:07:39.368 JST: NTP Core(DEBUG): ntp_receive: peer is 0x65AF28A8, next action is 1.
Jun  1 09:07:39 172.16.2.2 30: 000026: *Jun  1 09:07:39.368 JST: NTP Core(DEBUG): receive: packet given to process_packet
Jun  1 09:07:39 172.16.2.2 31: 000027: *Jun  1 09:07:39.368 JST: NTP Core(DEBUG): Peer becomes reachable, poll set to 6.
Jun  1 09:07:40 172.16.2.2 32: 000028: *Jun  1 09:07:39.368 JST: NTP Core(INFO): peer 172.16.2.245 event 'event_reach' (0x84) status 'unreach, conf, 2 events, event_reach' (0x8024)
Jun  1 09:07:40 172.16.2.2 33: 000029: *Jun  1 09:07:39.368 JST: NTP Core(INFO): synchronized to 172.16.2.245, stratum 2                                                 Jun  1 09:07:40 172.16.2.2 34: 000030: *Jun  1 09:07:39.372 JST: NTP Core(NOTICE): Clock is synchronized.
Jun  1 09:07:45 172.16.2.201 30: 000026: Jun  1 09:07:44.888 JST: NTP message sent to 172.16.2.245, from interface 'Vlan1' (172.16.2.201).
Jun  1 09:07:45 172.16.2.201 31: 000027: Jun  1 09:07:44.888 JST: NTP message received from 172.16.2.245 on interface 'Vlan1' (172.16.2.201).
Jun  1 09:07:45 172.16.2.201 32: 000028: Jun  1 09:07:44.888 JST: NTP Core(DEBUG): ntp_receive: message received
Jun  1 09:07:45 172.16.2.201 33: 000029: Jun  1 09:07:44.888 JST: NTP Core(DEBUG): ntp_receive: peer is 0x024BC5B8, next action is 1.
Jun  1 09:07:45 172.16.2.201 34: 000030: Jun  1 09:07:44.888 JST: NTP Core(DEBUG): receive: packet given to process_packet
Jun  1 09:07:47 172.16.2.1 25: 000021: *Jun  1 09:07:47.743 JST: NTP message sent to 172.16.2.245, from interface 'FastEthernet0/0' (172.16.2.1).
Jun  1 09:07:47 172.16.2.1 26: 000022: *Jun  1 09:07:47.743 JST: NTP message received from 172.16.2.245 on interface 'FastEthernet0/0' (172.16.2.1).
Jun  1 09:07:47 172.16.2.1 27: 000023: *Jun  1 09:07:47.743 JST: NTP Core(DEBUG): ntp_receive: message received
Jun  1 09:07:47 172.16.2.1 28: 000024: *Jun  1 09:07:47.743 JST: NTP Core(DEBUG): ntp_receive: peer is 0x65AFE7C8, next action is 1.
Jun  1 09:07:47 172.16.2.1 29: 000025: *Jun  1 09:07:47.743 JST: NTP Core(DEBUG): receive: packet given to process_packet
Jun  1 09:07:47 172.16.2.1 30: 000026: *Jun  1 09:07:47.743 JST: NTP Core(DEBUG): Peer becomes reachable, poll set to 6.
Jun  1 09:07:48 172.16.2.1 31: 000027: *Jun  1 09:07:47.743 JST: NTP Core(INFO): peer 172.16.2.245 event 'event_reach' (0x84) status 'unreach, conf, 2 events, event_reach' (0x8024)
Jun  1 09:07:48 172.16.2.1 32: 000028: *Jun  1 09:07:47.743 JST: NTP Core(INFO): synchronized to 172.16.2.245, stratum 2
Jun  1 09:07:48 172.16.2.1 33: 000029: *Jun  1 09:07:47.743 JST: NTP Core(NOTICE): Clock is synchronized.
Jun  1 09:08:36 172.16.2.1 34: 000030: Jun  1 09:08:34.550 JST: OSPF-1 PAK  : rcv. v:2 t:1 l:48 rid:172.16.2.2 aid:0.0.0.0 chk:3452 aut:0 auk: from FastEthernet0/0
Jun  1 09:08:39 172.16.2.2 35: 000031: Jun  1 09:08:37.388 JST: OSPF-1 PAK  : rcv. v:2 t:1 l:48 rid:172.16.2.1 aid:0.0.0.0 chk:3452 aut:0 auk: from FastEthernet0/0
Jun  1 09:08:44 172.16.2.2 36: 000032: Jun  1 09:08:42.368 JST: NTP message sent to 172.16.2.245, from interface 'FastEthernet0/0' (172.16.2.2).
Jun  1 09:08:44 172.16.2.2 37: 000033: Jun  1 09:08:42.368 JST: NTP message received from 172.16.2.245 on interface 'FastEthernet0/0' (172.16.2.2).
Jun  1 09:08:44 172.16.2.2 38: 000034: Jun  1 09:08:42.368 JST: NTP Core(DEBUG): ntp_receive: message received
Jun  1 09:08:44 172.16.2.2 39: 000035: Jun  1 09:08:42.368 JST: NTP Core(DEBUG): ntp_receive: peer is 0x65AF28A8, next action is 1.
Jun  1 09:08:44 172.16.2.2 40: 000036: Jun  1 09:08:42.368 JST: NTP Core(DEBUG): receive: packet given to process_packet
Jun  1 09:08:45 172.16.2.1 35: 000031: Jun  1 09:08:43.554 JST: OSPF-1 PAK  : rcv. v:2 t:1 l:48 rid:172.16.2.2 aid:0.0.0.0 chk:3452 aut:0 auk: from FastEthernet0/0
Jun  1 09:08:48 172.16.2.2 41: 000037: Jun  1 09:08:46.699 JST: OSPF-1 PAK  : rcv. v:2 t:1 l:48 rid:172.16.2.1 aid:0.0.0.0 chk:3452 aut:0 auk: from FastEthernet0/0
Jun  1 09:08:50 172.16.2.201 35: 000031: Jun  1 09:08:49.891 JST: NTP message sent to 172.16.2.245, from interface 'Vlan1' (172.16.2.201).
Jun  1 09:08:50 172.16.2.201 36: 000032: Jun  1 09:08:49.891 JST: NTP message received from 172.16.2.245 on interface 'Vlan1' (172.16.2.201).
Jun  1 09:08:50 172.16.2.201 37: 000033: Jun  1 09:08:49.891 JST: NTP Core(DEBUG): ntp_receive: message received
Jun  1 09:08:50 172.16.2.201 38: 000034: Jun  1 09:08:49.891 JST: NTP Core(DEBUG): ntp_receive: peer is 0x024BC5B8, next action is 1.
Jun  1 09:08:50 172.16.2.201 39: 000035: Jun  1 09:08:49.891 JST: NTP Core(DEBUG): receive: packet given to process_packet
Jun  1 09:08:54 172.16.2.1 36: 000032: Jun  1 09:08:52.870 JST: OSPF-1 PAK  : rcv. v:2 t:1 l:48 rid:172.16.2.2 aid:0.0.0.0 chk:3452 aut:0 auk: from FastEthernet0/0
Jun  1 09:08:54 172.16.2.1 37: 000033: Jun  1 09:08:53.742 JST: NTP message sent to 172.16.2.245, from interface 'FastEthernet0/0' (172.16.2.1).
Jun  1 09:08:54 172.16.2.1 38: 000034: Jun  1 09:08:53.742 JST: NTP message received from 172.16.2.245 on interface 'FastEthernet0/0' (172.16.2.1).
Jun  1 09:08:54 172.16.2.1 39: 000035: Jun  1 09:08:53.742 JST: NTP Core(DEBUG): ntp_receive: message received
Jun  1 09:08:54 172.16.2.1 40: 000036: Jun  1 09:08:53.742 JST: NTP Core(DEBUG): ntp_receive: peer is 0x65AFE7C8, next action is 1.
Jun  1 09:08:54 172.16.2.1 41: 000037: Jun  1 09:08:53.742 JST: NTP Core(DEBUG): receive: packet given to process_packet
Jun  1 09:08:58 172.16.2.2 42: 000038: Jun  1 09:08:56.175 JST: OSPF-1 PAK  : rcv. v:2 t:1 l:48 rid:172.16.2.1 aid:0.0.0.0 chk:3452 aut:0 auk: from FastEthernet0/0
Jun  1 09:09:04 172.16.2.1 42: 000038: Jun  1 09:09:02.366 JST: OSPF-1 PAK  : rcv. v:2 t:1 l:48 rid:172.16.2.2 aid:0.0.0.0 chk:3452 aut:0 auk: from FastEthernet0/0
Jun  1 09:09:07 172.16.2.2 43: 000039: Jun  1 09:09:06.039 JST: OSPF-1 PAK  : rcv. v:2 t:1 l:48 rid:172.16.2.1 aid:0.0.0.0 chk:3452 aut:0 auk: from FastEthernet0/0
Jun  1 09:09:13 172.16.2.1 43: 000039: Jun  1 09:09:11.894 JST: OSPF-1 PAK  : rcv. v:2 t:1 l:48 rid:172.16.2.2 aid:0.0.0.0 chk:3452 aut:0 auk: from FastEthernet0/0
Jun  1 09:09:17 172.16.2.2 44: 000040: Jun  1 09:09:15.167 JST: OSPF-1 PAK  : rcv. v:2 t:1 l:48 rid:172.16.2.1 aid:0.0.0.0 chk:3452 aut:0 auk: from FastEthernet0/0
Jun  1 09:09:23 172.16.2.1 44: 000040: Jun  1 09:09:21.298 JST: OSPF-1 PAK  : rcv. v:2 t:1 l:48 rid:172.16.2.2 aid:0.0.0.0 chk:3452 aut:0 auk: from FastEthernet0/0

Amazing.

References

tech/network/cisco/syslog/syslog.txt · Last modified: 2018/06/01 09:10 by wnoguchi