Monitoring IP Traffic

[Richard Ace]

Hi

Can anyone point me in the right direction.

I need to monitor all IP addresses going out of a server and all IP addresses coming in to the server. I initially thought about running a loop script to interrigate the ARP CACHE every five mins and report out to a log, but before I crack on. Has anyone out there have any ideas or even a wheel or script I do not need to re-invent

Much appreciated for any pointer or help. and all have 10 points every time. Why not

Cheers Rich!!!!!!!!

[Richard Ace]

This is for HP-UX 11.0 server

Cheers

Rich

[RAC_1 · Accepted solution]

A nice sniffer (there are so many of them) like tcpdump from a windows machine on all ips of hp-ux server would do what you want. tcpdump is available for hp-ux too.

[Steven E. Protter]

Shalom Rich,

I think tcpdump will do the job, but the output can be rather cumbersome to work with.

http://hpux.cs.utah.edu/hppd/hpux/Gtk/Applications/ethereal-0.10.11/

Ethereal up there is a good product with a nice GUI. It has proven to me to be one of the more reliable products from the software porting and archive center.

If HP has ported Ethereal to the Internet Express product, its even easier to install, because dependencies seem to be built into the depot file.

http://software.hp.com

Search for Internet Express.

SEP

[Arunvijai_4]

Hi Rich,

Ethereal and TCPdump are integeral part of Internet express, you can download from

http://h20293.www2.hp.com/portal/swdepot/displayProductInfo.do?productNumber=HPUXIEXP1111

-Arun

[Jaime Bolanos Rojas.]

Richard, I am sure you will have a lot of fun with Ethereal and tcpdump, output if fun to analized and simple to find after 30 minutes of being looking at it.

Just do not spend the whole day watching them, after a while you will start seing 0's and 1's combined with hex addresses.

Regards,

Jaime.

[Richard Ace]

Cheers all thanks for your help peeps I wil crack on and look into those

Thanks again and have 10 points

Rich