nettl syntax assistance

[Simpson]

All,

I would like to log all traffic for a specific port/ip combination. example. Log all data passed through port 23 for ip 111.111.11.11. I was wondering if you cna nettl for this ( been throught the man pages but don't see anything ) Any help would be appreciated.

Thanks

[Patrick Wallek]

I don't think nettl offers that granularity.

However, if you have Ethereal (old name) or Wireshard (new name) installed, then you should be able to accomplish this. Ethereal/Wireshark is very flexible.

http://www.wireshark.org/

Wireshark is available for MANY platforms, including HP-UX.

[Alex Glennie]

see attached

[Tim Nelson]

Check out the man page for nettl, specifically the trace-on option.

The trace file can then be filtered with the netfmt viewer.

[Anshumali]

If nettl's alternatives can be used, suggest is you use wireshark. The O/P trace offers many features like sorting and filtering lot many protocols. The best part is wireshark is available almost all OS versions including Windows and the o/P is compatible across platforms to review.
The latest version also offers the wireless traffic logging...if you are using on hp-ux.. ;)

[Anshumali]

Can be downloaded from here....
http://h20392.www2.hp.com/portal/swdepot/displayProductInfo.do?productNumber=HPUXIEXP1111

[skt_skt]

#/usr/sbin/nettl -tn pduin pduout -e btlan igelan -m 128 -ks 10M -us 30M -nk 5 -nu 5 -tm 900M -f /var/adm/crash/nettl_t


1) one line format "netfmt -Nnl1Tf nettl_t.TRC000 > nettl_t.one"

then read the nettl_t.one file and look for ICMP ot I

2) full format of the trace "netfmt -Nnf nettl_t.TRC000 > nettl_t.full"

and read the nettl_t.full file look for ICMP