Interception of data from an ethernet card

[hp admin]

Hi,

I there a command (same as snoop -SUN-) in HP-UX ?

Thank's in advance.

[Keith Bryson]

Try tcpdump?

Keith

[Keith Bryson]

Have a look at the following link - this software package includes goodies like tcpdump.

http://www.software.hp.com/portal/swdepot/displayProductInfo.do?productNumber=HPUXIEXP1111

All the best - Keith

[Fabio Ettore]

Hi,

insert the keyword 'snoop' in the ITRC search above and you will find a lot of hints.

I prefer ethereal:
http://www.ethereal.com/

I noticed good new features in the 10.9 (the latest) release.

Anyway other ITRC people suggest tcpdump or nettl (this is already on operating system).

Hope this helps you.

Best regards,
Fabio

[rick jones]

Snoop, tcpdump, ethereal perform what I would call "traffic sniffing." I'm not sure I would call it "interception." Interception implies being interposed between the NIC and the stack in a manner similar say to a firewall - like ipfilter.

Keep in mind that with the prevalence of switches, what snoop, tcpdump or ethereal will see will be only that traffic that comes to the switch port to which that NIC is connected. In broad handwaving terms, that means only traffic destined to that NIC (system).

[Emil Velez]

nettl with correct filters will print out traffic from certain ports of a interface

HPUX does have ipfilter which implements a system firewall.

What additional features were you looking for.