nettl on HP-UX

[apichart]

If I wanna capture SMPP packet on port 6699. Which command should I use for HP-UX?

nettl? How is the syntax? in Sun we have snoop -o port xxx

[harry d brown jr]

http://hpux.cs.utah.edu/hppd/hpux/Networking/Admin/snort-2.0.1/

live free or die
harry

[Brian Hackley]

1. Capture packets
nettl -tn all -e ns_ls_ip -tm 99999 -size 1024 -f some-raw-capture-file

2. Reproduce problem.

3. Turn off trace: nettl -tf -e all

4. Create formatter filter file. Example:
filter tcp_sport 6699
filter tcp_dport 6699

5. Filter the packets:
5.1 "Long" display
netfmt -Nlnc filter-file -f some-raw.capture > formatted.out
5.2 "One-liner" display
netfmt -Nln1Tc filter-file -f some-raw.capture > one-liner.out

Hope that helps,

-> Brian Hackley

[Sridhar Bhaskarla]

Hi,

If you have 11i, or 11.0 with reasonably latest patches, then there is a command called 'nettladm' that provides an interface to nettl and netfmt commands.

-Sri