topic Re: iptrace command?? in Operating System - HP-UX

iptrace command??

Becke — Tue, 15 Aug 2006 19:01:59 GMT

Hi Guys

Could you tell me how to run iptrace command on specific interface to capture network traffic...thanks..i looked in the man pages but didn't get enough help

Re: iptrace command??

Khashru — Tue, 15 Aug 2006 20:02:50 GMT

If you want to capture network traffic information use nettl. Do a man on this command.

Re: iptrace command??

rayche — Tue, 15 Aug 2006 20:10:48 GMT

In hpux,there is another command nettl to trace network, you can enable nettl :

/usr/sbin/nettl -start

then, there is a log file named nettl.LOG00 exist in /var/adm you can use netfmt to read it :

netfmt -f /var/adm/nettl.LOG00

Thanks.

Re: iptrace command??

nanan — Tue, 15 Aug 2006 20:33:08 GMT

It may good for you to use nettl
there are an example for ip trace
#nettl -start
#nettl -tn pduin pduout -e ns_ls_ip -s 1024 -tm 99999 -f .log
you can get log files

To stop the gathering
#nettl -tf -e all

Use man nettl
you can get more information

Regards
nanan

Re: iptrace command??

Bill Hassell — Wed, 16 Aug 2006 06:41:12 GMT

As mentioned, nettl is the native HP-UX trace program but after reading the documentation and looking at the decoded trace data, it is very cryptic. A better choice is to use a PC with winPcap and Ethereal (www.ethereal.com). Ethereal is the best tool there is to controlling the scope of a trace as well as formatting the data in a meaningful display. Like nettl, Ethereal can generate massively large logfiles unless you limit the scope of the trace to just a specific MAN or IP address. And Ethereal can also decode nettl trace files.

Re: iptrace command??

Becke — Thu, 17 Aug 2006 09:34:46 GMT

Thanks Bill and all, I have learned something new with your help guys, and I have also found out the you can use ipreport command to formatt data that was captured using iptrace command...

Thanks guys
Raf