Network traffic

[Young C. Jun]

I posted same article several days ago. But, I couldn't get the solution.

The question is what's going on the network.

I'm monitoring system using glance(gpm) and often see high traffic in network window.

I'd like to know how I can find out what is going on the network.

Is there any command I can see the contents of the traffic?
Is there any command I can verify which process is sending and getting message via network?

TIA

[Alan Riggs]

The best way to get a view of the network use of individual processes is with lsof, which is available from the porting site. You can also use glance to look at teh resources used by an individual process. One note, if your system has multiple NICs then the simplified network traffic view in the popup window may not be accurate. Make sure you examine the traffic on each individua card to determine if you are experiencing a network traffic issue.

netstat -i and lanadmin are both good tools to check for excess collisions/errors on individual cards.

[CHRIS_ANORUO]

Check the online manual netstat ie (man netstat).
You can also high light a section on glance network
and check on the details.

[Steven Sim Kok Leong]

Hi,

HP-UX has its own tcpdump equivalent which is nettladm. Use it to read your IP, TCP and UDP packets inbound and outbound of your system. Otherwise, compile tcpdump on your system.

Regards.

Steven.

[John_Hancock]

To actually see the contents of the packets on the network you need a machine or device with a promiscous lan card with promiscous drivers running packet capture software.

We use lan probes with NetMetrix but for a one off there are several usefiull shareware packages on the internet that will run on a PC. We use to use a small free thing from 3Com but it did not have packet decodes.

John Hancock

[Anthony Goonetilleke]

Actualy there is a simple way to do this using nettl

to start monitoring
nettl -tn 0x30800000 -e all | netfmt -FNnlc /tmp/filterfile | tee /tmp/fmt0

where /tmp/filterfile can have any sort of filters in my case it is something like this

filter ip_saddr 192.10.1.1
filter ip_daddr 192.10.1.1

/tmp/fmt0 is the output file, the output will also be displayed on the screen.

top stop it simply cntrl-c out and type the following
nettl -tf -e all