topic TRC Files in Operating System - OpenVMS

TRC Files

Hari Shankar S — Tue, 03 Feb 2009 12:09:11 GMT

Can someone please tell me the method to open trc files. It contains some tcpdumps for an ftp issue.

Re: TRC Files

Steven Schweda — Tue, 03 Feb 2009 12:33:48 GMT

"HELP OPEN"?
"HELP EDIT"?
HELP ME? What are "trc files"? Made how?
Why? Is there some actual problem which you
are trying to solve? Care to reveal it?

Re: TRC Files

Hari Shankar S — Tue, 03 Feb 2009 13:40:10 GMT

Actually, I am working on a problem with ftp. To aid in my debugging, I was sent these ".trc" files. They are supposed to contain tcpdump information. When I try to open them using the "open", "edit" or "type" command, I am able to open then but I get a lot of junk values with a bit of useful information. So I just wanted to if there any other way to open it properly.

Re: TRC Files

Hein van den Heuvel — Tue, 03 Feb 2009 13:48:10 GMT

'Junk' values is not very decsriptive.
To make sense out of them, you may to try DUMP.

First use a DIR / FULL and look a the Record Attributes. That defines what to expect.

Next DUMP/RECOR=COU=3 or DUMP/BLOC=COUNT=1.
Let the numbers and text speak to you for a while. Does it look like text, or binary data? Can you 'see' a part of the file being transferred?

You may need a command like SET FILE/ATTR=(RFM=VAR,RAT=STM) to make the file attributes re-match the file data. Then type/page or edit the file.

If you need further help then be sure to attach a TEXT file with DIR/FULL output and DUMP/BLOCK=COUNT=1.
If there is sensitive data, then MASK that out with say ???? in text and hex part.

Good luck!
Hein.

Re: TRC Files

Steven Schweda — Tue, 03 Feb 2009 13:50:29 GMT

> They are supposed to contain tcpdump
> information.

I now know about as much as I did before.

> I was sent these ".trc" files.

Ask the fellow who sent them?

Re: TRC Files

Oswald Knoppers_1 — Tue, 03 Feb 2009 14:33:45 GMT

If these files contain tcpdump info I would copy them (binary mode) to a PC and use wireshark (http://www.wireshark.org/) to interpret them.

Oswald

Re: TRC Files

Hari Shankar S — Wed, 04 Feb 2009 05:33:43 GMT

Thanks to all of you for your help. I now know that these .trc files are Sniffer Capture File. It was created using tcpdump with the -w option. It can be read using tcpdump itself using the -r option.

Wireshark, as Oswald had suggested, might also work.

And special thanks to Hein for such a descreptive answer.

Re: TRC Files

Hari Shankar S — Wed, 04 Feb 2009 05:37:52 GMT