CLI command 'show netstat listening yes' fails intermittently
6511
Created On 10/09/19 02:21 AM - Last Modified 12/06/22 13:49 PM
Symptom
When using show netstat listening yes command, the CLI output is not displayed and an error message is displayed as shown below.
admin@Lab> show netstat listening yes
op command for client dagger timed out as client is not available
Environment
- All PA Firewalls.
- Any PAN-OS.
Cause
When show netstat command is used without a numeric option, it tries to resolve the DNS entries for the IP addresses being displayed. Sometimes the DNS resolution times out and the error message is displayed.
Resolution
The workaround is to use numeric option as shown below which will not try to resolve DNS entries and so the output is displayed without any error.
show netstat listening yes numeric yes