how can I monitor the incoming and outgoing packets

[bebravo]

Hi,

how can I monitor the incoming and outgoing packets that pass on every network card in my system?

thanks in advance.

bebravo

[Muthukumar_5]

# netstat -ivn will give that.

--
Muthu

[RAC_1]

tcp dump tool. Get it here.
http://hpux.connect.org.uk
You also need to install plibcap and then tcpdump.

[Muthukumar_5]

To monitor you have to install tcpdump or sysmon tool available as,

http://hpux.connect.org.uk/hppd/hpux/Sysadmin/sysmon-0.92/
http://hpux.connect.org.uk/hppd/hpux/Networking/Admin/libpcap-0.9.4/

--
Muthu

[bebravo]

Hi,

I need something that is available on the Core OS install.

thanks in advance

bebravo

[RAC_1]

netfmt and nettl.
thesedays, it also comes with a nice UI-nettladm
Read man pages for details.

[Antonio Cardoso_1]

check also lanadmin:
lanadmin -g mibstats 0
will provide you detailed information on interface, including packets/octets in/out

antonio.

[Antonio Cardoso_1]

and also
# netstat -ivn
Name Mtu Network Address Ipkts Ierrs Opkts Oerrs Coll
lan0 1500 192.168.22.0 192.168.22.1 16879706 0 17104973 0 0
lo0 4136 127.0.0.0 127.0.0.1 5877803 0 5877803 0 0

from http://forums1.itrc.hp.com/service/forums/questionanswer.do?threadId=1014485

[Steven E. Protter]

My first suggestion would have been tcpdump, though I thought it was part of the Core OS by now.

Another, easier to use suggestion is ethereal, which ships as part of the Internet Express kit from software.hp.com

11i v1
http://h20293.www2.hp.com/portal/swdepot/displayProductInfo.do?productNumber=HPUXIEXP1111

11i v2
http://h20293.www2.hp.com/portal/swdepot/displayProductInfo.do?productNumber=HPUXIEXP1123

SEP

[Todd Whitcher]

Hi,

You can log TCP and UDP connections with HP's IPfilter product.

I wrote a document about it, be careful though because it will create a lot of data in the log file.

The document is "UTRANKBRC00017096" in the ITRC knowledge base.

Here is the basic ipf.conf file.

pass in log first quick proto tcp from any to any flags S keep state
pass out log first quick proto tcp from any to any flags S keep state
pass in log first quick proto udp from any to any keep state
pass out log first quick proto udp from any to any keep state
pass in from any to any
pass out from any to any

Ipfiler is available for free of Internet express or via the HP software depot. Its loaded by default at 11.23.

http://www.hp.com/go/softwaredepot

Hope that helps

Todd