17-40
Cisco Intrusion Prevention System Sensor CLI Configuration Guide for IPS 7.2
OL-29168-01
Chapter17 Administrative Tasks for the Sensor
Displaying Tech Support Information
Displaying Tech Support Information
Note
The show tech-support command now displays historical interface data for each interface for the past
72 hours.
Use the show tech-support [page] [destination-url destination_url] command to display system
information on the screen or have it sent to a specific URL. You can use the information as a
troubleshooting tool with TAC.
The following parameters are optional:
•
page—Displays the output, one page of information at a time. Press Enter to display the next line
of output or use the spacebar to display the next page of information .
•
destination-url—Indicates the information should be formatted as HTML and sent to the
destination that follows this command. If you use this keyword, the output is not displayed on the
screen.
•
destination_url—Indicates the information should be formatted as HTML.The URL specifies where
the information should be sent. If you do not use this keyword, the information is displayed on the
screen.
•
You can specify the following destination types:
–
ftp:—Destination URL for FTP network server. The syntax for this prefix is:
ftp:[[//username@location]/relativeDirectory]/filename
or
ftp:[[//username@location]//absoluteDirectory]/filenam e
.
–
scp:—Destination URL for the SCP network server. The syntax for this prefix is:
scp:[[//username@]location]/relativeDirectory]/filenam e
or
scp:[[//username@]location]//absoluteDirectory]/filena me
.
Varlog Files
The /var/log/messages file has the latest logs. A new softlink called varlog has been created under the
/usr/cids/idsRoot/log folder that points to the /var/log/messages file. Old logs are stored in varlog.1 and
varlog.2 files. The maximum size of these varlog files is 200 KB. Once they cross the si ze limit the
content is rotated. The content of varlog, varlog.1, and varlog.2 is displayed in the output of the show
tech-support command. The log messages (/usr/cids/idsRoot/varlog files) persist only across sensor
reboots. The old logs are lost during software upgrades.
Displaying Tech Support Information
To display tech support information, follow these steps:
Step 1
Log in to the CLI using an account with administrator privileges.
Step 2
View the output on the screen. The system information appears on the screen, one page at a time. Press
the spacebar to view the next page or press Ctrl-C to return to the prompt
sensor# show tech-support page
Step 3
To send the output (in HTML format) to a file:
a.
Enter the following command, followed by a valid destination. The
password:
prompt appears.
sensor# show tech-support destination-url destination_url