topic Re: Network traffic in Operating System - HP-UX

Network traffic

Young C. Jun — Thu, 01 Jun 2000 12:58:21 GMT

I posted same article several days ago. But, I couldn't get the solution.

The question is what's going on the network.

I'm monitoring system using glance(gpm) and often see high traffic in network window.

I'd like to know how I can find out what is going on the network.

Is there any command I can see the contents of the traffic?
Is there any command I can verify which process is sending and getting message via network?

TIA

Re: Network traffic

Alan Riggs — Thu, 01 Jun 2000 13:11:06 GMT

The best way to get a view of the network use of individual processes is with lsof, which is available from the porting site. You can also use glance to look at teh resources used by an individual process. One note, if your system has multiple NICs then the simplified network traffic view in the popup window may not be accurate. Make sure you examine the traffic on each individua card to determine if you are experiencing a network traffic issue.

netstat -i and lanadmin are both good tools to check for excess collisions/errors on individual cards.

Re: Network traffic

CHRIS_ANORUO — Thu, 01 Jun 2000 13:15:51 GMT

Check the online manual netstat ie (man netstat).
You can also high light a section on glance network
and check on the details.

Re: Network traffic

Steven Sim Kok Leong — Fri, 02 Jun 2000 02:37:19 GMT

Hi,

HP-UX has its own tcpdump equivalent which is nettladm. Use it to read your IP, TCP and UDP packets inbound and outbound of your system. Otherwise, compile tcpdump on your system.

Regards.

Steven.

Re: Network traffic

John_Hancock — Mon, 05 Jun 2000 03:19:19 GMT

To actually see the contents of the packets on the network you need a machine or device with a promiscous lan card with promiscous drivers running packet capture software.

We use lan probes with NetMetrix but for a one off there are several usefiull shareware packages on the internet that will run on a PC. We use to use a small free thing from 3Com but it did not have packet decodes.

John Hancock

Re: Network traffic

Anthony Goonetilleke — Tue, 06 Jun 2000 00:17:55 GMT

Actualy there is a simple way to do this using nettl

to start monitoring
nettl -tn 0x30800000 -e all | netfmt -FNnlc /tmp/filterfile | tee /tmp/fmt0

where /tmp/filterfile can have any sort of filters in my case it is something like this

filter ip_saddr 192.10.1.1
filter ip_daddr 192.10.1.1

/tmp/fmt0 is the output file, the output will also be displayed on the screen.

top stop it simply cntrl-c out and type the following
nettl -tf -e all