Inject tracer packets into the data path.

Show a time line of packet changes in a data path.

Show all rules applicable to a packet along with the CLI lines which caused the rule addition.

Verify the configuration is working as intended.

Debug all packet drops in production network.

The packet-tracer command lets you do the following: With the РІР‚Сљpacket-tracerРІР‚Сњ command it is possible to trace the lifespan of a packet through the security appliance to see if it is behaving as expected.

: Displays the trace results in XML format.: Provides detailed tracing output information.dest_port: Destination port of the packet.dest_addr: Destination IP address of the packet.src_port: Source port of the packet (can be any arbitrary number, preferably above 1024).src_addr: Here enter a source IP address of the packet.protocol: This can be РІР‚Сљ tcpРІР‚Сњ or РІР‚Сљ udpРІР‚Сњ or РІР‚Сљ icmpРІР‚Сљ.

: Specify the source (ingress) interface from which the simulated packet will start.There are much more options in the command above, but IРІР‚в„ўm showing the most simple and most useful syntax (we will see also detailed examples below). Packet-tracer input protocol src_addr src_port dest_addr dest_port To run a packet tracing session for packet troubleshooting and network fault isolation, use the packet-tracer command as shown below:

Firewall asa 5505 cisco packet tracer