IFTRACE (1M)

IFTRACE

NAME

iftrace trace host network packets

SYNOPSIS

iftrace [gdpbhrtn] [f diskfile] [i count] [keywords]

DESCRIPTION

iftrace allows the super-user to trace packets at the interface level. The traced packets may be those received, sent, or both. A filtering facility is provided to dis- card broadcast packets (-b), to select received (-r) and/or transmitted (-t) packets, as well as to filter packets based upon keywords. Packets may be captured to a disk file or displayed as captured. The default display decodes as much of the datagram's protocol as possible. Currently, only DOD IP and AppleTalk datagram protocols are supported in this manner. All other datagram types are captured and displayed in a hexadecimal dump format.

The options have the following meaning:

g Get packets. This option primes the driver for packet capture. The r,

t, b options specify the capture filter.

p Print packets. This option displays the captured packets. If used with

the g option, the packets are displayed as they are captured. Without

g, the display comes from the disk file.

r Set capture filter to receive. This option is only valid with g (get pack- ets). The default is to capture transmit and receive packets. Specifica- tion of either r or t will reset default filter.

t Set capture filter to transmit. This option is only valid with g (get packets). The default is to capture transmit and receive packets. Specifi- cation of either r or t will reset default filter.

b Set capture filter to ignore broadcasts. This option is only valid with g (get packets). This option does not reset the default filter.

h By default, packets are interpreted and displayed in a verbose format. This option interprets Ethernet Type II, IEEE802.3, and IEEE802.2 LLC/SNAP headers, and displays the rest of the packets in a hexade- cimal dump format.

n Display host addresses in numerical format. The default display translates addresses into host names. This option is only valid with p set. When using gp, this option is recommended since packets are pro- cessed faster.

f diskfile

Specify a diskfile for capture or display. The default filename is /var/adm/lcs/iftrace.data.

i count

Capture count packets and quit. This option is only valid with g (get packets). The default action is to capture until killed.

E-24

Issue 3

Page 342
Image 342
HP LCS60 manual Iftrace 1M, Iftrace gdpbhrtn f diskfile i count keywords, Diskfile, Count