Tracing packets on cisco - debug ip packet

• cisco access list

  • permit packets from 10.2.3.4 to 195.176.0.0/16, deny others
    • access-list 199 permit ip 10.2.3.4 0.0.0.0 195.176.0.0 0.0.255.255 log-input
    • access-list 199 deny ip 0.0.0.0 255.255.255.255 0.0.0.0 255.255.255.255

• use access-list with “debug ip packet”

  • debug ip packet 199