E-79
Cisco Intrusion Prevention System Appliance Hardware Installation Guide for IPS 7.1
OL-24002-01
Appendix E Troubleshooting
Gathering Information
Displaying Tech Support Information
Note The show tech-support command now displays historical interface data for each interface for the past
72 hours.
Use the show tech-support [page] [destination-url destination_url] command to display system
information on the screen or have it sent to a specific URL. You can use the information as a
troubleshooting tool with the TAC.
The following parameters are optional:
• page—Displays the output, one page of information at a time. Press Enter to display the next line
of output or use the spacebar to display the next page of information.
• destination-url—Indicates the information should be formatted as HTML and sent to the
destination that follows this command. If you use this keyword, the output is not displayed on the
screen.
• destination_url—Indicates the information should be formatted as HTML.The URL specifies where
the information should be sent. If you do not use this keyword, the information is displayed on the
screen.
• You can specify the following destination types:
–
ftp:—Destination URL for FTP network server. The syntax for this prefix is:
ftp://[[username@location]/relativeDirectory]/filename or
ftp://[[username@location]//absoluteDirectory]/filename
–
scp:—Destination URL for the SCP network server. The syntax for this prefix is:
scp://[[username@]location]/relativeDirectory]/filename or
scp://[[username@]location]//absoluteDirectory]/filename
Varlog Files
The /var/log/messages file has the latest logs. A new softlink called varlog has been created under the
/usr/cids/idsRoot/log folder that points to the /var/log/messages file. Old logs are stored in varlog.1 and
varlog.2 files. The maximum size of these varlog files is 200 KB. Once they cross the size limit the
content is rotated. The content of varlog, varlog.1, and varlog.2 is displayed in the output of the show
tech-support command.
Displaying Tech Support Information
To display tech support information, follow these steps:
Step 1 Log in to the CLI using an account with administrator privileges.
Step 2 View the output on the screen. The system information appears on the screen, one page at a time. Press
the spacebar to view the next page or press Ctrl-C to return to the prompt
sensor# show tech-support page
Step 3 To send the output (in HTML format) to a file:
a. Enter the following command, followed by a valid destination. The password: prompt appears.
sensor# show tech-support destination-url destination_url
Example
To send the tech support output to the file
/absolute/reports/sensor1Report.html:
Comments to this Manuals