topic Re: XML output command of ARP managment in 9.1.11 in General Topics

topic Re: XML output command of ARP managment in 9.1.11 in General Topics https://live.paloaltonetworks.com/t5/general-topics/xml-output-command-of-arp-managment-in-9-1-11/m-p/449308#M100920 <P>Hi <a href="https://live.paloaltonetworks.com/t5/user/viewprofilepage/user-id/130663">@Joshan_Lakhani</a> ,</P><P> </P><P>It may be a bug in PAN-OS 9.1.11.  I am running 10.1.3, and the comand works fine for me.</P><P> </P><P>tyoung@fdsnsdfw01> show arp management</P><P><response status="success"><result><BR /><total>2</total><BR /><entries><BR /><entry><BR /><interface>eth0</interface><BR /><ip>removed</ip><BR /><mac>removed</mac><BR /><status>C</status><BR /></entry><BR /><entry><BR /><interface>eth0</interface><BR /><ip>removed</ip><BR /><mac>removed</mac><BR /><status>C</status><BR /></entry><BR /></entries><BR /></result></response></P><P> </P><P>Thanks,</P><P> </P><P>Tom</P> Wed, 24 Nov 2021 22:53:05 GMT TomYoung 2021-11-24T22:53:05Z XML output command of ARP managment in 9.1.11 https://live.paloaltonetworks.com/t5/general-topics/xml-output-command-of-arp-managment-in-9-1-11/m-p/449284#M100916 <P><SPAN>Hello ,</SPAN></P><P><SPAN> </SPAN></P><P><SPAN>I have multiple firewall with running PAN-OS 9.1.11 and above version.</SPAN></P><P><SPAN>i am facing an issue to generate XML output command of ARP managment.</SPAN></P><P><SPAN> </SPAN></P><P><SPAN>When i run the ARP managment command to set XML output on i am getting the below error:-</SPAN></P><P><SPAN> </SPAN></P><P><SPAN>admin@PA-VM-Passive> set cli op-command-xml-output on</SPAN></P><P><SPAN> </SPAN></P><P><SPAN>admin@PA-VM-Passive> show arp management</SPAN></P><P><STRONG><EM><SPAN> </SPAN></EM></STRONG></P><P><STRONG><EM>Server error : An error occured. See dagger.log for information.</EM></STRONG></P><P><SPAN> </SPAN></P><P><SPAN>when i checked the dagger.log and i got the below output:-</SPAN></P><P><SPAN> </SPAN></P><P><SPAN>2021-11-24 09:21:29.968 +0300 OPCMD: handler "counter.show_global"</SPAN></P><P><SPAN>2021-11-24 09:24:32.350 +0300 OPCMD: handler "arp.show_completer"</SPAN></P><P><SPAN>2021-11-24 09:24:33.847 +0300 OPCMD: handler "arp"</SPAN></P><P><SPAN>Traceback (most recent call last):</SPAN></P><P><SPAN>  File "/usr/share/dagger/arp.py", line 59, in __xml__</SPAN></P><P><SPAN>    return self.mgmtif.show_arp_xml(*args, **kwargs)</SPAN></P><P><SPAN>  File "/usr/share/dagger/mgmtif.py", line 579, in show_arp_xml</SPAN></P><P><SPAN>    return self._show_arp(*args, **kwargs)</SPAN></P><P><SPAN>  File "/usr/share/dagger/mgmtif.py", line 527, in _show_arp</SPAN></P><P><SPAN>    arp_to_buf('/sbin/arp %s -i eth1' % dns, buf, header, fprint, "", "")</SPAN></P><P><SPAN>  File "/usr/share/dagger/mgmtif.py", line 498, in arp_to_buf</SPAN></P><P><SPAN>    pfunc(buf, o)</SPAN></P><P><SPAN>  File "/usr/share/dagger/mgmtif.py", line 570, in print_entry</SPAN></P><P><SPAN>    buf.append( { 'interface':e[-1], 'ip':e[0], 'mac':e[2], 'status':e[3] } )</SPAN></P><P><STRONG><EM>IndexError: list index out of range</EM></STRONG></P><P><SPAN> </SPAN></P><P><SPAN> </SPAN></P><P><SPAN>However when i run the show arp managment to off the XML output i got the result succesfully.</SPAN></P><P><SPAN> </SPAN></P><P><SPAN>One more point i want to add if i run any command to get the XML output i got the result succesfully.</SPAN></P><P><SPAN>below is the example:-</SPAN></P><P><SPAN> </SPAN></P><P><SPAN>admin@PA-VM-Passive> set cli op-command-xml-output on</SPAN></P><P><SPAN>admin@PA-VM-Passive> show arp all</SPAN></P><P><SPAN> </SPAN></P><P><SPAN><response status="success"><result></SPAN></P><P><SPAN>  <max>1500</max></SPAN></P><P><SPAN>  <total>11</total></SPAN></P><P><SPAN>  <timeout>1800</timeout></SPAN></P><P><SPAN>  <dp>dp0</dp></SPAN></P><P><SPAN>  <entries></SPAN></P><P><SPAN>    <entry></SPAN></P><P><SPAN>      <status>  c  </status></SPAN></P><P><SPAN>      <ip>192.168.30.101</ip></SPAN></P><P><SPAN>      <mac>00:0c:29:04:e0:aa</mac></SPAN></P><P><SPAN>      <ttl>761</ttl></SPAN></P><P><SPAN>      <interface>ethernet1/1</interface></SPAN></P><P><SPAN>      <port>ethernet1/1</port></SPAN></P><P><SPAN>    </entry></SPAN></P><P><SPAN>    <entry></SPAN></P><P><SPAN>      <status>  c  </status></SPAN></P><P><SPAN>      <ip>172.16.6.16</ip></SPAN></P><P><SPAN>      <mac>00:0c:29:f1:38:4c</mac></SPAN></P><P><SPAN>      <ttl>1696</ttl></SPAN></P><P><SPAN>      <interface>ethernet1/2</interface></SPAN></P><P><SPAN>      <port>ethernet1/2</port></SPAN></P><P><SPAN>    </entry></SPAN></P><P><SPAN>    <entry></SPAN></P><P><SPAN>      <status>  c  </status></SPAN></P><P><SPAN>      <ip>172.16.6.27</ip></SPAN></P><P><SPAN>      <mac>00:0c:29:9b:58:36</mac></SPAN></P><P><SPAN>      <ttl>308</ttl></SPAN></P><P><SPAN>      <interface>ethernet1/2</interface></SPAN></P><P><SPAN>      <port>ethernet1/2</port></SPAN></P><P><SPAN>    </entry></SPAN></P><P><SPAN>    <entry></SPAN></P><P><SPAN>      <status>  c  </status></SPAN></P><P><SPAN>      <ip>172.16.6.36</ip></SPAN></P><P><SPAN>      <mac>00:0c:29:52:0b:77</mac></SPAN></P><P><SPAN>      <ttl>165</ttl></SPAN></P><P><SPAN>      <interface>ethernet1/2</interface></SPAN></P><P><SPAN>      <port>ethernet1/2</port></SPAN></P><P><SPAN>    </entry></SPAN></P><P><SPAN>    <entry></SPAN></P><P><SPAN>      <status>  c  </status></SPAN></P><P><SPAN>      <ip>172.16.6.135</ip></SPAN></P><P><SPAN>      <mac>00:0c:29:0f:84:39</mac></SPAN></P><P><SPAN>      <ttl>576</ttl></SPAN></P><P><SPAN>      <interface>ethernet1/2</interface></SPAN></P><P><SPAN>      <port>ethernet1/2</port></SPAN></P><P><SPAN>    </entry></SPAN></P><P><SPAN>    <entry></SPAN></P><P><SPAN>      <status>  c  </status></SPAN></P><P><SPAN>      <ip>172.16.6.225</ip></SPAN></P><P><SPAN>      <mac>00:0c:29:4b:7e:01</mac></SPAN></P><P><SPAN>      <ttl>639</ttl></SPAN></P><P><SPAN>      <interface>ethernet1/2</interface></SPAN></P><P><SPAN>      <port>ethernet1/2</port></SPAN></P><P><SPAN>    </entry></SPAN></P><P><SPAN>    <entry></SPAN></P><P><SPAN>      <status>  c  </status></SPAN></P><P><SPAN>      <ip>172.16.6.234</ip></SPAN></P><P><SPAN>      <mac>00:0c:29:6d:75:61</mac></SPAN></P><P><SPAN>      <ttl>1096</ttl></SPAN></P><P><SPAN>      <interface>ethernet1/2</interface></SPAN></P><P><SPAN>      <port>ethernet1/2</port></SPAN></P><P><SPAN>    </entry></SPAN></P><P><SPAN>    <entry></SPAN></P><P><SPAN>      <status>  c  </status></SPAN></P><P><SPAN>      <ip>172.16.6.235</ip></SPAN></P><P><SPAN>      <mac>00:0c:29:3c:82:91</mac></SPAN></P><P><SPAN>      <ttl>605</ttl></SPAN></P><P><SPAN>      <interface>ethernet1/2</interface></SPAN></P><P><SPAN>      <port>ethernet1/2</port></SPAN></P><P><SPAN>    </entry></SPAN></P><P><SPAN>    <entry></SPAN></P><P><SPAN>      <status>  c  </status></SPAN></P><P><SPAN>      <ip>172.16.7.70</ip></SPAN></P><P><SPAN>      <mac>00:0c:29:22:27:55</mac></SPAN></P><P><SPAN>      <ttl>273</ttl></SPAN></P><P><SPAN>      <interface>ethernet1/2</interface></SPAN></P><P><SPAN>      <port>ethernet1/2</port></SPAN></P><P><SPAN>    </entry></SPAN></P><P><SPAN>    <entry></SPAN></P><P><SPAN>      <status>  c  </status></SPAN></P><P><SPAN>      <ip>172.16.7.236</ip></SPAN></P><P><SPAN>      <mac>00:0c:29:a9:34:df</mac></SPAN></P><P><SPAN>      <ttl>1689</ttl></SPAN></P><P><SPAN>      <interface>ethernet1/2</interface></SPAN></P><P><SPAN>      <port>ethernet1/2</port></SPAN></P><P><SPAN>    </entry></SPAN></P><P><SPAN>    <entry></SPAN></P><P><SPAN>      <status>  c  </status></SPAN></P><P><SPAN>      <ip>172.16.7.254</ip></SPAN></P><P><SPAN>      <mac>00:1b:17:00:0a:11</mac></SPAN></P><P><SPAN>      <ttl>1792</ttl></SPAN></P><P><SPAN>      <interface>ethernet1/2</interface></SPAN></P><P><SPAN>      <port>ethernet1/2</port></SPAN></P><P><SPAN>    </entry></SPAN></P><P><SPAN>  </entries></SPAN></P><P><SPAN></result></response></SPAN></P><P><SPAN> </SPAN></P><P><SPAN>Has anyone suggest on this. </SPAN></P> Wed, 24 Nov 2021 18:07:34 GMT https://live.paloaltonetworks.com/t5/general-topics/xml-output-command-of-arp-managment-in-9-1-11/m-p/449284#M100916 Joshan_Lakhani 2021-11-24T18:07:34Z Re: XML output command of ARP managment in 9.1.11 https://live.paloaltonetworks.com/t5/general-topics/xml-output-command-of-arp-managment-in-9-1-11/m-p/449308#M100920 <P>Hi <a href="https://live.paloaltonetworks.com/t5/user/viewprofilepage/user-id/130663">@Joshan_Lakhani</a> ,</P><P> </P><P>It may be a bug in PAN-OS 9.1.11.  I am running 10.1.3, and the comand works fine for me.</P><P> </P><P>tyoung@fdsnsdfw01> show arp management</P><P><response status="success"><result><BR /><total>2</total><BR /><entries><BR /><entry><BR /><interface>eth0</interface><BR /><ip>removed</ip><BR /><mac>removed</mac><BR /><status>C</status><BR /></entry><BR /><entry><BR /><interface>eth0</interface><BR /><ip>removed</ip><BR /><mac>removed</mac><BR /><status>C</status><BR /></entry><BR /></entries><BR /></result></response></P><P> </P><P>Thanks,</P><P> </P><P>Tom</P> Wed, 24 Nov 2021 22:53:05 GMT https://live.paloaltonetworks.com/t5/general-topics/xml-output-command-of-arp-managment-in-9-1-11/m-p/449308#M100920 TomYoung 2021-11-24T22:53:05Z Re: XML output command of ARP managment in 9.1.11 https://live.paloaltonetworks.com/t5/general-topics/xml-output-command-of-arp-managment-in-9-1-11/m-p/449346#M100921 <P><a href="https://live.paloaltonetworks.com/t5/user/viewprofilepage/user-id/77347">@TomYoung</a> </P><P>I upgrade my firewall from 9.1.11 to 10.1.3 version but still facing same issue</P><P> </P><P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="Joshan_Lakhani_0-1637823577459.png" style="width: 400px;"><img src="https://live.paloaltonetworks.com/t5/image/serverpage/image-id/37796iA038B6E3A3D31180/image-size/medium/is-moderation-mode/true?v=v2&px=400" role="button" title="Joshan_Lakhani_0-1637823577459.png" alt="Joshan_Lakhani_0-1637823577459.png" /></span></P><P> </P> Thu, 25 Nov 2021 07:03:42 GMT https://live.paloaltonetworks.com/t5/general-topics/xml-output-command-of-arp-managment-in-9-1-11/m-p/449346#M100921 Joshan_Lakhani 2021-11-25T07:03:42Z Re: XML output command of ARP managment in 9.1.11 https://live.paloaltonetworks.com/t5/general-topics/xml-output-command-of-arp-managment-in-9-1-11/m-p/450334#M101034 <P><a href="https://live.paloaltonetworks.com/t5/user/viewprofilepage/user-id/77347">@TomYoung</a> </P><P> </P><P>I am facing the same issue. i have tried with the different firewalls with the same version some firewalls show the error and some do not.</P><P> </P> Tue, 30 Nov 2021 06:17:15 GMT https://live.paloaltonetworks.com/t5/general-topics/xml-output-command-of-arp-managment-in-9-1-11/m-p/450334#M101034 Jafar_Hussain 2021-11-30T06:17:15Z