Procedure to run ethereal trace

[tr10385]

Can you pls. send me the procedure for running ethereal trace from hp-ux device.

[Khairy]

hi there,

ethereal is full gui utility. Just execute ethereal and the window will appear. But its in gtk style window.

You could start it from command line with a log of parameters.

For a start, take a view of this doc->http://netmirror.org/mirror/ftp.ethereal.com/docs/user-guide-a4.pdf

Don't forget to assign some points if this answers your question. thanks!

Rgds

[Khairy]

how about tcpdump?

you can execute it from command line and you could see all the ack and nak info you wants.

format would be :
# tcpdump -i

[tr10385]

i am basically checking the trace for a source (which is natted) to destination in DMZ. So we expect a firewall between a the source and destination (in dmz). I am checking teh bi-drectional traffic between them on port 80. Can you pls. suggest the command format for this and the output should be readable in a log file.
Thank you

[Steven E. Protter]

Shalom,

Use the gui filter either by host name or port 80 or both if the gui lets.

Otherwise consider using tcpdump and then grep to further filter the output.

SEP

[tr10385]

format would be :
# tcpdump -i

interface should be IP address of the destination or the port. Basically I am trying to check a manual ISEE connectivity to the destination (dmz) which is a windows machine. there is no communication happenning between a HP-UX device to Windows machine (in dmz).

What is the significance of keepalive value:

ndd -get /dev/tcp tcp_keepalive_interval
7200000

How do I change this value to higher or lower value.