close

keyboard_arrow_left

Table of Contents Expand all

list Table of Contents

English

monitor pfe traffic interface

date_range 20-Dec-24

arrow_backward

arrow_forward

Syntax

content_copy zoom_out_map
monitor pfe traffic interface interface-name
<absolute-sequence>
<brief | detail | extensive> 
<byte-offset>
<count count> 
<egress>
<egress-interface interface-name>
<ingress> 
<inner-dmac | inner-dst-ipv4 | inner-smac | inner-src-ipv4>
<layer2-headers> 
<no-domain-names> 
<no-promiscuous> 
<no-resolve> 
<no-timestamp> 
<outer-dmac | outer-dst-ipv4 | outer-smac | outer-src-ipv4>
<print-ascii> 
<print-hex> 
<read-file filename>
<resolve-timeout>
<size size> 
<vlan-id>
<vnid>
<write-file filename>

Description

Display packet headers or packets that are received and sent from the packet forwarding engine for monitoring and verifying the functionality of on-box packet sniffing capabilities.

Options

absolute-sequence	Display absolute TCP sequence numbers.
brief \| detail \| extensive	Display the specified level of output.
byte-offset	Display the specified level of output.
count `count`	Specify the number of packet headers to display (0 through 1,000,000).
egress	Egress data traffic monitoring.
egress-interface	Specify the egress interface where loopback is enabled.
ingress	Ingress data traffic monitoring.
inner-dmac \| inner-dst-ipv4 \| inner-smac \| inner-src-ipv4	Display the inner header addresses to monitor traffic and packet headers.
layer2-headers	Display the link-level header on each line.
no-domain-names	Suppress the display of the domain portion of hostnames.
no-promiscuous	Do not put the interface into promiscuous mode.
no-resolve	Do not attempt to convert host addresses to names.
no-timestamp	Suppress timestamps on displayed packets.
outer-dmac \| outer-dst-ipv4 \| outer-smac \| outer-src-ipv4	Display the outer header addresses to monitor traffic and packet headers.
print-ascii	Display each packet in ASCII format.
print-hex	Display each packet in hexadecimal format.
resolve-timeout `timeout`	Amount of time the router or switch waits for each reverse lookup before timing out. You can set the timeout for 1 through 4,294,967,295 seconds.
size `size`	Snap length of the frame to be captured, in bytes.
vlan-id	VLAN identifier to monitor traffic.
vnid	VXLAN identifier to monitor traffic.
write-file `filename`	Write packets to the file specified.

Required Privilege Level

interface—To view this statement in the configuration.

interface-control—To view this statement in the configuration.

Output Fields

When you enter this command, you are provided feedback on the status of your request.

Sample Output

monitor pfe traffic interface interface-name ingress outer-dmac destination MAC address
monitor pfe traffic interface interface-name egress egress-interface interface-name vnid 1000 byte-offset 12

monitor pfe traffic interface interface-name ingress outer-dmac destination MAC address

content_copy zoom_out_map
user@host> monitor pfe traffic interface xe-0/0/0:0 ingress outer-dmac 00:00:00:00:00:0C
verbose output suppressed, use  or  for full protocol decode
Address resolution is ON. Use  to avoid any reverse lookup delay.
Address resolution timeout is 4s.
Listening on xe-0/0/0:0, capture size 96 bytes

Reverse lookup for 192.85.1.2 failed (check DNS reachability).
Other reverse lookup failures will not be reported.
Use  to avoid reverse lookups on IP addresses.

10:19:07.579828  In IP truncated-ip - 50 bytes missing! 192.85.1.2 > 192.85.1.3:  ip-proto-253 86
10:19:07.579833  In IP truncated-ip - 50 bytes missing! 192.85.1.2 > 192.85.1.3:  ip-proto-253 86

monitor pfe traffic interface interface-name egress egress-interface interface-name vnid 1000 byte-offset 12

content_copy zoom_out_map
user@host> monitor pfe traffic interface xe-0/0/0:0 egress egress-interface xe-0/0/30:0 vnid 1000 byte-offset 12

verbose output suppressed, use  or  for full protocol decode
Address resolution is ON. Use  to avoid any reverse lookup delay.
Address resolution timeout is 4s.
Listening on xe-0/0/30:0, capture size 96 bytes

Reverse lookup for 204.1.1.1 failed (check DNS reachability).
Other reverse lookup failures will not be reported.
Use  to avoid reverse lookups on IP addresses.

14:30:36.718089  In IP truncated-ip - 110 bytes missing! 204.1.1.1.36912 > 203.1.1.1.vxlan: VXLAN(VNI:1000 Flags:8000000)
14:30:36.720244  In IP truncated-ip - 110 bytes missing! 204.1.1.1.36912 > 203.1.1.1.vxlan: VXLAN(VNI:1000 Flags:8000000)

Release Information

Command introduced before Junos OS Release 24.4R1.

arrow_backward PREVIOUS monitor-object

NEXT arrow_forward monitor-profile

Junos CLI Reference

ON THIS PAGE