network activities monitoring.

[jayachandran.g]

Hi all

In sun servers in that snoop command is there which will clearly tell the network activities is there anything like that for HP.

if it is there how to use it?


thank you
Jayachandran.G

[Mel Burslan · Accepted solution]

I have no experience with snoop on sun systems but I am assuming it is something like nettl under hp-ux.

nettl is a very deep subject to explaing the use of it in a posting like this. man nettl will give you a lot of information. I am dsure you will get lost in in for the first few times.

A quick start guide like instructions can be found at this page:

http://www1.itrc.hp.com/service/cki/docDisplay.do?docLocale=en_US&docId=200000007950516

but they are by no means complete or as detailed as it gets.

HTH

[The Real MD]

hi,

you can use tcpdump or tcptrace

http://hpux.cs.utah.edu/hppd/cgi-bin/search?package=on&description=on&term=tcpdump

or you could use ethereal

I hope this helps

Martin.

[Biswajit Tripathy]

tcpdump, as suggested above, is an option
and is packaged with "internet express" and
available at software depot website at
www.hp.com.

Another option is IPFilter system firewall.
It would take couple of minutes to configure
IPFilter to log all network activities or some
specific type of activituies you are interested
in.

- Biswajit

[Yogeeraj_1]

hi,

note that nettl allow you to capture only network activities such as state changes, errors, and connection establishment.

also, nettl can be used only by users who have an effective user ID of 0.

hope this helps too!
regards
yogeeraj

[Fabio Ettore]

Hi,

if you insert in the ITRC search (you find it on top of the page) just the word snoop you will see many many similar questions, one for all:

http://forums2.itrc.hp.com/service/forums/questionanswer.do?threadId=787126

Anyway nettl is the closer tool on HP-UX like snoop on Solaris.

Hope this helps you.

Best regards,
Fabio

[jayachandran.g]

Hey

I have downloaded the tcp dump i got a file .depot how do i install it?

[Fabio Ettore]

Hi,

all .depot files have to be installed by swinstall (for example my file.depot is under /tmp):

swinstall -s /tmp/file.depot \*

It will do an analysis before and then (if analysis will be ok) will install the product.

After that check if the software tcpdump is installed:

swlist -l product | grep -i tcpdump

Best regards,
Fabio

[jayachandran.g]

Hi Fabio

I gave the same command what you gave..

but it telling that there is no depot software in my server at the location /tmp/file.depot make sure the path is correct

[jayachandran.g]

ok ok its done

thanks a lot