mirror of https://github.com/opnsense/docs
You cannot select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
135 lines
5.0 KiB
ReStructuredText
135 lines
5.0 KiB
ReStructuredText
===========
|
|
Diagnostics
|
|
===========
|
|
|
|
The interface diagnostics page contains various tools to help debug network issues.
|
|
|
|
---------------------
|
|
ARP Table
|
|
---------------------
|
|
|
|
The `ARP <https://en.wikipedia.org/wiki/Address_Resolution_Protocol>`__ table module shows all MAC addresses known by this firewall.
|
|
|
|
==============================================================================================================================================
|
|
|
|
=========================== ==================================================================================================================
|
|
IP IPv4 address
|
|
MAC `MAC <https://en.wikipedia.org/wiki/MAC_address>`__ address
|
|
Manufacturer Manufacturer looked up with the mac address above
|
|
Interface Associated interface
|
|
Interface name The name of the interface if found
|
|
Hostname In case of a DHCPv4 client, the hostname when found in the leases file
|
|
=========================== ==================================================================================================================
|
|
|
|
---------------------
|
|
DNS Lookup
|
|
---------------------
|
|
|
|
Perform a quick dns lookup from the firewall.
|
|
|
|
---------------------
|
|
NDP Table
|
|
---------------------
|
|
|
|
Show addresses learned by the `Neighbor Discovery Protocol <https://en.wikipedia.org/wiki/Neighbor_Discovery_Protocol>`__ for IPv6.
|
|
|
|
==============================================================================================================================================
|
|
|
|
=========================== ==================================================================================================================
|
|
IPv6 IPv6 address
|
|
MAC `MAC <https://en.wikipedia.org/wiki/MAC_address>`__ address
|
|
Manufacturer Manufacturer looked up with the mac address above
|
|
Interface Associated interface
|
|
Interface name The name of the interface if found
|
|
=========================== ==================================================================================================================
|
|
|
|
|
|
---------------------
|
|
Netstat
|
|
---------------------
|
|
|
|
The netstat module contains a useful set of network status and statistics metrics, which are split into a number of
|
|
topics.
|
|
|
|
|
|
.. Tip::
|
|
|
|
.. raw:: html
|
|
|
|
Use the refresh <i class="fa fa-refresh fa-fw"></i> icon in the tab to refresh the data in it (selection won't change).
|
|
|
|
|
|
In order of relevance you can find the following information here:
|
|
|
|
........................
|
|
Interfaces
|
|
........................
|
|
|
|
This section contains all (physical and virtual) attached interfaces to the system containing metrics like the number of
|
|
packets and bytes send- and received per (hardware) address.
|
|
|
|
........................
|
|
Protocol
|
|
........................
|
|
|
|
Contains system wide statistics for each network protocol. Examples of statistics that can be found in this region are
|
|
the number of tcp listening connections, sent packets, duplicate packets, etc, etc.
|
|
|
|
........................
|
|
Sockets
|
|
........................
|
|
|
|
Displays network and unix domain sockets, this basically combines :code:`netstat` with :code:`sockstat` on FreeBSD
|
|
in order to provide insights into which process is listening were combined with metrics known by the system.
|
|
|
|
........................
|
|
Netisr
|
|
........................
|
|
|
|
Show statistics from the kernel network dispatch service, known as :code:`netisr(9)`.
|
|
|
|
........................
|
|
Memory
|
|
........................
|
|
|
|
Show statistics recorded by the memory management routines (:code:`mbuf(9)`).
|
|
The network manages a private pool of memory buffers.
|
|
|
|
........................
|
|
Bpf
|
|
........................
|
|
|
|
Show statistics about :code:`bpf(4)` peers.
|
|
This includes information like how many packets have been matched, dropped and received by the bpf device,
|
|
also information about current buffer sizes and device states.
|
|
|
|
---------------------
|
|
Packet capture
|
|
---------------------
|
|
|
|
The packet capture module can be used to deep dive into traffic passing a (or multiple) network interfaces.
|
|
It has some options you can choose from, such as the interface to listen on, protocol you interested in and
|
|
host to track.
|
|
|
|
Packet capture uses `tcpdump <https://www.tcpdump.org/>`__ and runs in the background. After a capture is performed you can
|
|
either look into it using the **View capture** button or download the pcap file to inspect it in an external tool, such as `Wireshark <https://www.wireshark.org/>`__.
|
|
|
|
---------------------
|
|
Ping
|
|
---------------------
|
|
|
|
Use ping to establish if a remote host can be reached using ICMP.
|
|
|
|
---------------------
|
|
Port Probe
|
|
---------------------
|
|
|
|
Test if a host has a certain TCP port open and accepts connections on it.
|
|
|
|
---------------------
|
|
Trace Route
|
|
---------------------
|
|
|
|
Use `traceroute <https://www.freebsd.org/cgi/man.cgi?query=traceroute>`__ / `traceroute6 <https://www.freebsd.org/cgi/man.cgi?query=traceroute6>`__
|
|
to measure the path traffic would follow when trying to reach a specific host.
|