OneFS: How to gather Isilon cluster diagnostics using the isi_netlogger command Article Number:000016707 Version:2 Key Information Audience: Level 30 = Customers Last Published: Tue Oct 15 20:12:54 GMT 2013 Summary:

Article Type: How To Validation Status: Final Approved

Article Content Goal: Introduction Capturing the packets of data that pass through a specific network interface is useful to diagnose network and file protocol problems. OneFS allows you to generate packet captures from the command line interface using isi_netlogger command. The isi_netlogger utility is a custom interface for tcpdump, a common packet analyzer that is available on most Unix-based operating systems. Running the isi_netlogger command captures IP traffic on the specified interface over a configurable number of minutes and stores the output in a file on the cluster. Environment: 877 Resolution: Procedure 1. Open an SSH connection on any node in the cluster and log on using the "root" account. 2. Run the following command: isi_netlogger This command runs isi_netlogger on the current node using the em0 interface with a snapshot length (snaplen) of 320 bytes per packet. 3. To stop the packet capture, press ctrl+c. 4. The compressed packet capture file is saved in the /ifs/netlog/bundled/ folder and is named using the following timestamped format: netlog-yyyy-mm-dd_hh.mm.ss.tar.bz2. 5. Send the compressed file to Isilon Technical Support for analysis.

NOTE To facilitate the packet capture analysis, make note of the client's IP address and the node that the client was connected to and provide that information to Isilon Technical Support. Additional examples NOTE Anything following '--' is interpreted as a tcpdump expression. See the tcpdump man page for information on additional tcpdump expressions. IMPORTANT! If you do not specify a snaplen, isi_netlogger defaults to 320 bytes per packet. Do not set a snaplen of 0 (captures the entire packet) unless instructed to do so by Isilon Technical Support. The following command runs isi_netlogger on all nodes (-c) using the em0 interface (-i), making five-minute incremental files (-t) and keeping (-k) 864 of them (about three days worth), using a snaplen (-s) of 320 bytes per packet, filtering out all of the incoming traffic except from the client with an IP address of 10.10.10.1: isi_netlogger -c -i em0 -t 5 -k 864 -s 320 -- host 10.10.10.1 The following command runs isi_netlogger on nodes 1 and 3, capturing only NFS traffic on port 2049: isi_netlogger -n 1,3 -i em0 -- port 2049 The following command runs isi_netlogger on the node that you are currently logged in to, capturing only FTP traffic on ports 20 and 21: isi_netlogger -i em0 -- port 20 or port 21 The following command runs isi_netlogger on the node that you are currently logged in to using the bundled (bonded) interface fec0: isi_netlogger -i fec0 The following command runs isi_netlogger on node 3 using the 10 GbE interface cxgb1: isi_netlogger -n 3 -i cxgb1

Article Metadata Product: Isilon OneFS, Isilon External Source: Primus Primus/Webtop solution ID: emc14000877