Network Packet Sniffer

[Bill_15]

Does anyone know if HP has a product for HPUX 11.00 that will detect what type of network traffic is being passed around? I am looking for something similar to a sniffer. If not, is there a sniffer available elsewhere for HPUX 11.00?

[Sridhar Bhaskarla · Accepted solution]

Bill,

You have got quite some choices.

1. Look at the bundled product nettl. You can use nettl to trace network logging and tracing and format the output using netfmt. Look at the man pages. You even have nettladm an interface to nettl.

2. I personally like ethereal. You can get it from the HP's porting center.

http://hpux.cs.utah.edu/hppd/hpux/Gtk/Applications/ethereal-0.9.7/

You will need to install a lot of other dependencies to get it running. But once it is up, it's cool and it has got a great GUI.

3. tcpdump. Again you can get it from the same website.

http://hpux.cs.utah.edu/hppd/hpux/Networking/Admin/tcpdump-3.7.1/

4. Try the networking/admin section of the catalog in the above section. You will find other products like snort etc., that you may find helpful.

-Sri

[A. Clay Stephenson]

My personal choice is ethereal; it is very powerful and has incredible filtering capabilities in addition to a very good GUI. As indicated, you can get it from any of the HP-UX Porting Centre's but make sure that you pay attention to the dependencies and get them loaded before swinstall'ing ethereal.

[Ron Kinner]

snort is fun tho not an HP product. It also does intrusion detection so it's pretty powerful.

http://www.snort.org/about.html

Ron