Routing
Highlighted
Routing

monitor traffic

‎06-03-2020 06:00 AM

hi

Some reason my ssh broke down when the following command [monitor traffic ] was on... I just got the device back device...

I check with 

bng>monitor list
No monitored files

How to make sure the following command is not on any more?

>monitor traffic interface ae128 extensive no-resolve size 9999 count 5

5 REPLIES 5
Highlighted
Routing

Re: monitor traffic

‎06-03-2020 06:08 AM

Hi,

the operations to monitor files and interface are bound to the session. So if your session is still there ("show system users") the command might still be running ...

Regards

Ulf

--
If this worked for you please flag my post as an 'Accepted Solution' so others can benefit. A kudo would be cool if you think I earned it.
Highlighted
Routing

Re: monitor traffic

‎06-03-2020 06:12 AM

Hi Arix,

 

monitor traffic is specific to the session from which it is run. So, if you duplicate ssh session to your device, and run monitor traffic on one of them, you will not see the packets on the other session.

 

So, monitor traffic... is not something that is saved in the config. Once your SSH session broke, the capture stopped. In case, you wish to start capturing again, you will need to issue the command once more, of course keeping in mind the impact it can have on your ssh session.

 

BR,

Vishal

 

 

PS: Please accept my response as solution if it answers you query, kudos are appreciated too!

Highlighted
Routing

Re: monitor traffic

‎06-03-2020 06:32 AM

Thanks mates...

I checked the ssh sessions, still my old multiple ssh sessions were hanging there...

I forcible disconnected myself from ssh sessions 

The following KB is really good..

https://kb.juniper.net/InfoCenter/index?page=content&id=KB9341

Highlighted
Routing

Re: monitor traffic

‎06-03-2020 03:15 PM

'monitor list' is relates to a different type of monitor (monitoring files for changes).

 

Monitor traffic is 'tcpdump', which is bound to an active session.

Highlighted
Routing

Re: monitor traffic

‎06-10-2020 03:25 PM

Hello Arix,

 

'user@switch> monitor list' shows the files that you are monitoring, this is helpful when you want to see the log messages appear in the current session you are connected.

 

for example you could use " > monitor start messages " and the file 'messages' located in the /var/log directory will show its messages in the session output, you would then stop this behavior by using 'monitor stop filename'

 

https://www.juniper.net/documentation/en_US/junos/topics/reference/command-summary/monitor-list.html

 

'monitor traffic' as mentioned would be similar to the tcpdump unix tool.

 

https://www.juniper.net/documentation/en_US/junos/topics/reference/command-summary/monitor-traffic.h...

 

Hope it helps.

 

Regards,

 

benjamin 

 

 

Feedback