Network Traffic 2

[Young C. Jun]

Thanks guys.

But, I still don't know How I can get the process,data information which is going on network.

I saw that there is no collisons,no errors.

I just want to know which process is sending and getting the data. Can I?

Thanks

[Alan Riggs]

netstat -a will show you which socket connections are in use. lsof can be used to query which processes are attached to particualr sockets.

[Paul Hite]

Well, you can view the actual packets and look for the source ip address and the source port. Then you go to the system who has that ip address and using lsof or glance find the process that has that port open. That process sent the packet.

Most folks use a network sniffer to see packets. This is usually a laptop with special software to capture the packets. You plug it in to the network and it "snoops" on all the traffic.

HP has software to log packets, which is an alternative if you don't have a sniffer. You use nettl(1M) to turn it on and it produces log files that you can view with netfmt(1M). There are man pages on all this stuff.

[CHRIS_ANORUO]

netstat -r will show you the ip address destination, gateway, flags ...use, etc