Nettl trace file analysis

[Md. Minhaz Khan]

Dear All
I have taken packet trace using "nettl –tn all –e all -s 1024 -tm 99999 -f /tmp/log" command. Then I format the output file /tmp/log.TRC0 using the command "netfmt -N -n -l -f /tmp/log.TRC0>/tmp/logRead" But I don’t understood how to analyze /tmp/logread file. Please give me some documents or guide line for analysis the trace file

[Matti_Kurkela]

First, ethereal/wireshark can read nettl dumps and analyze them. It's easier and much more powerful way to analyze them than using netfmt. Install the latest version of wireshark on your workstation and use it to examine the /tmp/log file.

(Ethereal changed its name to Wireshark because of trademark issues.)

Second, analyzing network traffic requires understanding of the TCP/IP protocols. This is a big topic: it cannot be taught with a single forum message. I learned the fundamentals of it in a "Basics of Telecommunications Systems" course back when I was in our local University of Technology.

MK

[Md. Minhaz Khan]

Ok