1834532 Members
2746 Online
110069 Solutions
New Discussion

sniffer

 
SOLVED
Go to solution
Ami Hofman
Occasional Advisor

sniffer

is there a real sniffer with nice gui that
works on HP-UX or should i stay happy with
tcpdump and nettl ???
9 REPLIES 9
Andreas Voss
Honored Contributor

Re: sniffer

Hi,

there is a fine tool called ethereal which has a perfect GUI:
http://hpux.cs.utah.edu/hppd/hpux/Gtk/ethereal-0.8.9/

Greetings

Andrew
Ami Hofman
Occasional Advisor

Re: sniffer

i allready downloaded this tool but i can't
make it work on HP-UX 11.0
how can i make it work ???
Andreas Voss
Honored Contributor
Solution

Re: sniffer

Hi,

you have to download and install dependecies too:
http://hpux.cs.utah.edu/hppd/hpux/Gtk/glib-1.2.8/
http://hpux.cs.utah.edu/hppd/hpux/Gtk/gtk+-1.2.8/
http://hpux.cs.utah.edu/hppd/hpux/Networking/Admin/libpcap-0.4/
http://hpux.cs.utah.edu/hppd/hpux/Misc/zlib-1.1.3/

How to install:

assuming you downloaded to /tmp:
unpack the downloaded file:
gzip -d
if your download file name has no .gz extension do:
gzip -dc < >
then use swinstall:
swinstall -s /tmp/

Greetings

Andrew
Ami Hofman
Occasional Advisor

Re: sniffer

hi!
i didn't eplain my self good, i installed
all the dependencies and the installed
ethereal and all went well, but !!! when i
am trying to activate it i get the error msg:
error: Can't find PPA for /dev/lan0
i have one 100BT card - /dev/lan0
i had the same problem with tcpdump but i
managed to get it work with /dev/dlpi1
this is not working for ethereal, i saw some
doc that said that wouldn't work for ethereal
but what does????
i'm stuck, please help.
Shannon Petry
Honored Contributor

Re: sniffer

I have the same problem with HP-UX 10.20 on a 9000/700 machine. Ethereal, and all of the dependencies are there. The GUI works fine, but it can not look at the LAN.
None of the readme's have anything. Anyone got this working? If so, what do you specify for the lan device?
Microsoft. When do you want a virus today?
James A. Donovan
Honored Contributor

Re: sniffer

I just asked the same question over in the Networking forum. I found a sentence in the INSTALL file for the libpcap code that says HP's DLPI implementation is "eccentric". It appears that the people who write/support libpcap have not fully ported it to HP yet. The big problem I have right now with tcpdump is that I can only capture incoming packets. Anyone reading this know what needs to be tweaked at the code level for libpcap for DLPI support on HP ?
Remember, wherever you go, there you are...
Steve Edmunds
Occasional Advisor

Re: sniffer

While we're on the subject, I was looking for tcpdump for HP-UX 11i, or Ethereal, but what I'd *really* like to find is Sun's non-GUI "snoop" was there ever a port of this to HP-UX?

Cheers

Steve
Steven Sim Kok Leong
Honored Contributor

Re: sniffer

Hi,

I agree with Andreas. Ethereal is really great. It allows you to perform a top-down approach in analysis from coarse to fine granularity.

Hope this helps. Regards.

Steven Sim Kok Leong
jimm_1
Occasional Advisor

Re: sniffer

I have installed Ethereal on a HP server,
and wanted to add some notes:

the zlib available on the hp-ux archive center
did not worked I had to get the source code,
also I had to install two other packages libiconv and gettext.

http://hpux.cs.utah.edu/hppd/hpux/Misc/zlib-1.1.4/
http://hpux.cs.utah.edu/hppd/hpux/Development/Libraries/libiconv-1.8/
http://hpux.cs.utah.edu/hppd/hpux/Gnu/gettext-0.11.5/

Regards,
Johan BURATI