08-17-2006
It's simple to capture packets and store it's headers in BerkeleyDB with secondary dbs etc., but it's a lot of work to make some interface to serach for information in this db
7 More Discussions You Might Find Interesting
1. UNIX for Advanced & Expert Users
We are using c2 / enhanced security on digital unix.
I do not have access to the GUI.
I need to get information on login status for users. Specifically I would like to know who has not logged in within the last 6 months.
I think I can query the edauth files, but I can't find information on... (4 Replies)
Discussion started by: MizzGail
4 Replies
2. Solaris
Hello;
I am moving a customer from Solaris 2.6 to Solaris 2.8. The customer has requested the following two requirements also be implemented:
1. Lock a user account out for X number of days after 3 unsuccessful login attempts.
2. No reuse of the last 5-10 passwords. Also referred to... (1 Reply)
Discussion started by: rambo15
1 Replies
3. UNIX for Advanced & Expert Users
for sco, hp, or AIX......
anyway, how can I secure the UNIX system.
I knew that CA has it's products for securing the UNIX server system.
Please tell me more about other vender, and their products
thxs! (0 Replies)
Discussion started by: brookwk
0 Replies
4. Shell Programming and Scripting
Dear
I have a problem on which I turn araound since hours.
Hope you could help me.
I have a bash script, which activates with "nohup ./script2 params & " several subscripts.
In my main script, I have set lot's of variables, which I would pass into script 2.
My idea is now to create a... (3 Replies)
Discussion started by: pramach
3 Replies
5. UNIX for Dummies Questions & Answers
Hi. I guess this my dummy question is for super-gurus.
I'm on Red Hat' documentation regarding their RDMA capabilities over "convergent" Ethernet network. I read everything that I could find on inet, wikipedia etc. about the technology itself. I can't figure out, how can I determine if the... (0 Replies)
Discussion started by: newlinuxuser1
0 Replies
6. AIX
Hi All,
I am going to perform some activity in 2Node HA Server(Active/Passive).
For that i have to do some pre-requsite (ie., Resource Group VG's should be Enhanced-Concurrent)
In my setup, we have two volume groups in one RG. In that one VG is Normal and another is Enhance Concurrent.
... (2 Replies)
Discussion started by: Thala
2 Replies
7. What is on Your Mind?
Dear All,
Thank you for your support. As promised I have upgrade features for unix.com forum VIP members as follows:
Who's Online Permissions
Can View IP Addresses
Can View Detailed Location Info for Users
Can View Detailed Location Info of Users Who Visit Bad / No Permission... (0 Replies)
Discussion started by: Neo
0 Replies
LEARN ABOUT FREEBSD
ipfwpcap
IPFWPCAP(8) BSD System Manager's Manual IPFWPCAP(8)
NAME
ipfwpcap -- copy diverted packets to a file in tcpdump format
SYNOPSIS
ipfwpcap [-dr] [-b maxbytes] [-p maxpkts] [-P pidfile] portnum dumpfile
DESCRIPTION
The ipfwpcap utility is used to copy diverted packets to a file in tcpdump(1) format. The interesting packets are diverted by ipfw(8) to a
port on which ipfwpcap listens. The packets are then dropped unless -r is used.
The options are as follows:
-d Turns on extra debugging messages.
-r Writes packets back to the divert(4) socket.
-rr Indicates that it is okay to quit if maxbytes or maxpkts are reached. Diverted packets will silently disappear if nothing is listen-
ing on the divert(4) socket.
-b maxbytes
Stop dumping after maxbytes bytes.
-p maxpkts
Stop dumping after maxpkt packets.
-P pidfile
File to store PID number in. Default is /var/run/ipwfpcap.portnr.pid.
The portnum argument specifies which divert(4) socket port to listen on. The dumpfile argument is the path to the file to write captured
packets to. Specify '-' to write to stdout.
EXIT STATUS
The ipfwpcap utility exits 0 on success, and >0 if an error occurs.
EXAMPLES
ipfwpcap -r 8091 divt.log &
Starts ipfwpcap as a background job listening to port 8091 and reflecting the packets back to the socket.
ipfw add 2864 divert 8091 ip from 192.0.2.101
Example ipfw(8) rule to divert all packets from 192.0.2.101 to port 8091. See ipfw(8) for details.
SEE ALSO
tcpdump(1), pcap(3), divert(4), ipfw(8)
HISTORY
The ipfwpcap utility first appeared in FreeBSD 7.0.
AUTHORS
ipfwpcap was written by P. Kern <pkern@cns.utoronto.ca>. This manual page was written by Niclas Zeising <zeising@FreeBSD.org>.
BSD
May 22, 2006 BSD