topic Re: Monitoring IP Traffic in Operating System - HP-UX

Monitoring IP Traffic

Richard Ace — Fri, 28 Jul 2006 05:06:02 GMT

Hi

Can anyone point me in the right direction.

I need to monitor all IP addresses going out of a server and all IP addresses coming in to the server. I initially thought about running a loop script to interrigate the ARP CACHE every five mins and report out to a log, but before I crack on. Has anyone out there have any ideas or even a wheel or script I do not need to re-invent

Much appreciated for any pointer or help. and all have 10 points every time. Why not

Cheers Rich!!!!!!!!

Re: Monitoring IP Traffic

Richard Ace — Fri, 28 Jul 2006 05:31:05 GMT

This is for HP-UX 11.0 server

Cheers

Rich

Re: Monitoring IP Traffic

RAC_1 — Fri, 28 Jul 2006 05:31:42 GMT

A nice sniffer (there are so many of them) like tcpdump from a windows machine on all ips of hp-ux server would do what you want. tcpdump is available for hp-ux too.

Re: Monitoring IP Traffic

Steven E. Protter — Fri, 28 Jul 2006 05:59:34 GMT

Shalom Rich,

I think tcpdump will do the job, but the output can be rather cumbersome to work with.

http://hpux.cs.utah.edu/hppd/hpux/Gtk/Applications/ethereal-0.10.11/

Ethereal up there is a good product with a nice GUI. It has proven to me to be one of the more reliable products from the software porting and archive center.

If HP has ported Ethereal to the Internet Express product, its even easier to install, because dependencies seem to be built into the depot file.

http://software.hp.com

Search for Internet Express.

SEP

Re: Monitoring IP Traffic

Arunvijai_4 — Fri, 28 Jul 2006 06:21:58 GMT

Hi Rich,

Ethereal and TCPdump are integeral part of Internet express, you can download from

http://h20293.www2.hp.com/portal/swdepot/displayProductInfo.do?productNumber=HPUXIEXP1111

-Arun

Re: Monitoring IP Traffic

Jaime Bolanos Rojas. — Fri, 28 Jul 2006 06:33:50 GMT

Richard, I am sure you will have a lot of fun with Ethereal and tcpdump, output if fun to analized and simple to find after 30 minutes of being looking at it.

Just do not spend the whole day watching them, after a while you will start seing 0's and 1's combined with hex addresses.

Regards,

Jaime.

Re: Monitoring IP Traffic

Richard Ace — Fri, 28 Jul 2006 09:53:30 GMT

Cheers all thanks for your help peeps I wil crack on and look into those

Thanks again and have 10 points

Rich