Displays network deployment, checking configuration and status information on a Network Security appliance.
Note
You can also run this command remotely from the CLI of an integrated Trellix Central Management System appliance using the Central Management System proxying mechanism.
Syntax
show deployment check network [config | status [detail]]
Parameters
config
(Optional) Display network deployment check configuration information only.
status
(Optional) Display network deployment check status information only.
status detail
(Optional) Display network deployment check detailed status information only.
Output fields
The following table describes the output fields for the command. Fields are listed in the approximate order in which they appear in the output.
Field Name | Description |
|---|---|
Latest deployment check is still running. Following is status for previous check: | If you run the command while a previous network deployment check is in progress, this message appears. The remainder of the command output shows the results of the previous network deployment check. |
Packet Capture Duration | Maximum packet capture duration as configured by the |
Status | Overall results of packet capture analysis:
|
Start time | Date and time the packet capture started. |
End time | Date and time the analysis finished. |
Following errors were detected | For the |
Captured data size (bytes) | Size (in bytes) of the packet capture analyzed. |
Captured packet count | Size (in packets) of the packet capture analyzed. If this number is below a system-defined threshold, an asterisk ('*') indicates that the value might indicate a network deployment problem. |
Re‑transmit packet count | Number of packets retransmitted. If this number exceeds a system-defined threshold, an asterisk ('*') indicates that the value might indicate a network deployment problem. |
Dup ACK packet count | Number of TCP DUP ACK records in the capture. If this number exceeds a system-defined threshold, an asterisk ('*') indicates that the value might indicate a network deployment problem. |
Out‑of‑order packet count | Number of reordered packets in the capture. If this number exceeds a system-defined threshold, an asterisk ('*') indicates that the value might indicate a network deployment problem. |
Acked unseen packet count | Number of TCP ACKed unseen segments in the capture. If this number exceeds a system-defined threshold, an asterisk ('*') indicates that the value might indicate a network deployment problem. |
Previous seg not captured packet count | Number of packets that arrived with a sequence number greater than the next expected sequence number on that connection. If this number exceeds a system-defined threshold, an asterisk ('*') indicates that the value might indicate a network deployment problem. |
Malformed packet count | Number of packets in the capture that are malformed. A sender might transmit a malformed packet, or a packet can become corrupted in transit. If this number exceeds a system-defined threshold, an asterisk ('*') indicates that the value might indicate a network deployment problem. |
Stream count | Number of active streams in the capture. If this number exceeds a system-defined threshold, an asterisk ('*') indicates that the value might indicate a network deployment problem. |
Asymmetric stream count | Number of asymmetric streams in the capture. If this number exceeds a system-defined threshold, an asterisk ('*') indicates that the value might indicate a network deployment problem. |
Message: Captured network output is available in file deployment_check.pcap. It can be uploaded with 'file tcpdump upload deployment_check.pcap'. | You can upload the captured and analyzed network traffic by using the |
Message: Please run 'deployment check network start' | If you clear the results of the last network deployment check, this message appears when you enter the following forms of the command:
|
Examples
The following example shows a successful network deployment check.
hostname # show deployment check network Network deployment check configuration: Packet Capture Duration: 120 Network deployment check status: Status: success Start time: 2014/07/21 00:00:00 End time: 2014/07/21 00:00:19 Captured data size (bytes): 10712908 Message: Captured network output is available in file deployment_check.pcap. It can be uploaded with 'file tcpdump upload deployment_check.pcap'.
The following example shows a failed network deployment check.
hostname # show deployment check network Network deployment check configuration: Packet Capture Duration: 120 Network deployment check status: Status: failed Start time: 2014/07/24 08:36:05 End time: 2014/07/24 08:36:17 Captured data size (bytes): 10981436 Following errors were detected: Out-Of-Order packet count: 17892 Message: Captured network output is available in file deployment_check.pcap. It can be uploaded with 'file tcpdump upload deployment_check.pcap'.
The following example shows details about a network deployment check, with the check still running and the previous check having failed.
hostname # show deployment check network status detail Latest deployment check is still running. Following is status for previous check Network deployment check status: Status: failed Start time: 2014/07/24 08:44:38 End time: 2014/07/24 08:44:48 Captured data size (bytes): 10691225 Captured packet count: 97239 Re-transmit packet count: 12079 Dup ACK packet count: 870 Out-Of-Order packet count: 21303 * Acked unseen packet count: 162 Previous seg not captured packet count: 4180 Malformed packet count: 0 Stream count: 1260 Asymmetric stream count: 94 Message: Captured network output is available in file deployment_check.pcap. It can be uploaded with 'file tcpdump upload deployment_check.pcap'. * Indicates error
The following example shows details about a network deployment check, with the last results cleared.
hostname # show deployment check network status detail Network deployment check status: Message: Please run 'deployment check network start'
The following example shows a network deployment check initiated on a Central Management System appliance on behalf of the managed appliance 'NX-1'.
hostname (config) # cmc execute appliance NX-1 command "show deployment check network" ============Appliance NX-1===================== Execution was successful. Execution output: Network deployment check configuration: Packet Capture Duration: 60 Network deployment check status: Status: success Start time: 2014/08/25 00:00:00 End time: 2014/08/25 00:00:14 Captured data size (bytes): 9910710 Message: Captured network output is available in file deployement_check.pcap. It can be uploaded with 'file tcpdump upload deployment_check.pcap'.
User role
Monitor, Analyst, Operator, or Admin
Command mode
Enable
Supported appliances
Command introduced in Release 7.4.0 for Network Security appliances.