monitoring IP Connections

[Michael T. Harding]

Hi Guys,

It would be very much appreciated if somebody could advise on how I could set up monitoring source IP and destination IP address and port number of all the connections coming to the IP address of the server. We are currently in the process of re-locating a number of our servers, thus we will be allocating primary and secondary up address's to our servers. we then need to moniter connections to the current ip@ and once this is resolved we will remove the secondary ip @. Your advise would be very much appreciated guys!

[Christian Gebhardt]

Try "netstat -a"

Chris

[Patrick Chim]

Hi,

You can use lsof to do that and can be downloaded in

http://hpux.cs.utah.edu/

e.g. lsof -i tcp:9000

it can show you the IP address and also the process id that associated with the port 9000.

Regards,
Patrick

[Michael T. Harding]

Thanks Guys!

I also found another utility called tcpdump... advise if this utility is sufficeint and whether by using these facilities my performance will have a slight glich?

Thanks

[T G Manikandan · Accepted solution]

You can use tcpdump/ethereal.
HP has a inbuilt utility for network tracing
Check the man pages of nettl.

check the document which will help in using nettl.

Thanks

[Patrick Chim]

Hi,

I think I have misunderstand your question before !! You need to monitor the packet between two IP address, right ? Then tcpdump can do what you want. However I am not familiar with it and so I can't make any advise to you ! :<

Regards,
Patrick