Login or Register to Ask a Question and Join Our Community


AIX

Capture Network Packets from AIX

Login to Discuss or Reply to this Discussion in Our Community

 
Thread Tools Search this Thread
Operating Systems AIX Capture Network Packets from AIX
# 1  
Old 01-07-2009
Capture Network Packets from AIX
Hi,

I am using smitty to create and configure a print queue. I am giving a print of a text file to the print queue created. I am using this in network.
How to capture network packets of the print from AIX to the printer and printer to AIX.

I tried Wireshark to capture network packets.
I am able to get only 'ack' packets that has been sent from printer to AIX.
I want to capture network packets from both the sides.

I tried this using a 10Mbps hub with Windows PC with Wireshark installed, AIX and Printer.
but if i connect only these 3 using 10Mbps hub i am not able to ping from AIX to windows or printer.

Please help.
# 2  
Old 01-07-2009
I suggest you use tcpdump from the AIX system to monitor network traffic to/fro the printer.
# 3  
Old 01-13-2009
Hi,

Thanks for the reply.

I used the below command to capture network packets.

/usr/sbin/iptrace -a -i en0 iptrace.out &
ipreport -r -s iptrace.out >/ipreport.network

and i could see the network packets captured to and fro the AIX and printer.

Actually I want to print from AIX to printer and capture the packets that has been sent from AIX and ack received from printer.
Both I am able to receive thru' the iptrace command.

Actually i want to capture it in wireshark(both to and fro packets).
Wireshark is capturing more TCP datas than iptrace. but only issue is I am getting only ack packets from printer.


Please help how to get both to and fro packets transformation from AIX.
or the iptrace command to list complete details of the TCP packets.

Thanks,
# 4  
Old 01-13-2009
Use tcpdump on AIX server to capture traffic into file. Export this file to windoze or linux PC and import it into Wireshark for analysis then.
http://www.wireshark.org/docs/man-pages/wireshark.html
# 5  
Old 01-15-2009
Hi,
Thanks for the reply.

If i execute that command following error message is displayed.

tcpdump: BIOCSETIF: en0: Do not specify an existing file.

Please help me out in solving the error.

After capturing the data from the below command, i am using ipreport command to redirect it.I am not able to open this in Wireshark as explained in The Wireshark Network Analyzer 1.1.2.

/usr/sbin/iptrace -a -i en0 iptrace.out &
ipreport -r -s iptrace.out >/ipreport.network
# 6  
Old 01-15-2009
Too little information... If you want answers you need to supply information first as my crystal ball is undergoing maintenance these days... How To Ask Questions The Smart Way

Quote:
Originally Posted by meeraramanathan
[...]If i execute that command following error message is displayed.[...]
Which command did you mean? What user do you use tcpdump with? Do you use tcpdump from AIX or tcpdump from the Linux Toolbox?

Quote:
Originally Posted by meeraramanathan
After capturing the data from the below command, i am using ipreport command to redirect it.I am not able to open this in Wireshark [...]
What exactly do you do? Which way do you transfer the report file to what type of machine?
# 7  
Old 01-15-2009
Quote:
Originally Posted by shockneck
as my crystal ball is undergoing maintenance these days...
Pffft - "man mindread" for the meantime. ;-))

There is a Ethereal version (i believe it is 0.99.7) which compiles on AIX 5.3. YOu might consider downloading this and using it instead of tcpdump.

Here is a link: freshmeat.net: Project details for Wireshark

I hope this helps.

bakunin
Login or Register to Ask a Question

Previous Thread | Next Thread

10 More Discussions You Might Find Interesting

1. Red Hat

How to set static routes for packets, within the same Network?

I have three systems A,B,C. I want to configure A in such a way that all packets from A to C goes via B. I tried: 1. ip route add 'ip of C' via 'ip of B' 2. route add -net 'net address' netmask gw 'ip of B' These commands work initially when I try a ping or traceroute and expire after... (2 Replies)
Discussion started by: kanak
2 Replies

2. Programming

Why am i getting these strange packets while running my packet capture module written in c.?

I have made an packet capture application running on intel machine, it is capturing packets with src address- 17.0.0.0 destination ip- 66.0.0.0, source port- 0, destination port- 0, and protocol- 0 what does these packets mean ? The code written to interpreter captured bytes is given below.... (5 Replies)
Discussion started by: arunpushkar
5 Replies

3. UNIX for Advanced & Expert Users

[Solved] Capture network disconnect or hung case

Hello folks, Have a process which needs to lock files to prevent simultaneous access. I could catch Ctrl + C, etc signals via the trap command. Often sessions get hung due to network disconnect leaving the lock file in place. Is there a way to catch network disconnects, etc. Thanks in... (4 Replies)
Discussion started by: vibhor_agarwali
4 Replies

4. IP Networking

Capture packets (TcpDump) and forwarding them

Hi, I want to capture a certain type of packets (selected according to the protocol) coming to my PC and then transmit them to another PC. I had the idea to use tcpdump to filter input packets and extract those chosen. Well my questions are: 1- after filtering input packets, those that have not... (1 Reply)
Discussion started by: ziedf
1 Replies

5. Infrastructure Monitoring

capture snmp packets in AIX

Hi, I want to capture snmp packets in AIX. When i give print from AIX6.1, Printer will give its response thru' snmp. I used iptrace command like below, but it is not capturing snmp packets other packets are captured like udp, tcp.. 1. iptrace command: /usr/sbin/iptrace -a -i en0... (1 Reply)
Discussion started by: meeraramanathan
1 Replies

6. UNIX for Dummies Questions & Answers

are dropped packets a sign of network problem?

in a xen environment , i see a lot op dropped packets via netstat -i Is this a sign of network problems, or is it normal to see this kind of numbers? i'm not sure how to interprete the data. is this normal, bad, critical. What are your stats on this? I guess i have a xen issue of some sort,... (1 Reply)
Discussion started by: progressdll
1 Replies

7. UNIX for Dummies Questions & Answers

Dumping network packets

Hi, My Solaris Workstation has got 4 NICS, out of which one of them(bge3) is unplugged from the rest of the external network & connected to other interface(bge1). The isolated NIC serves as a simulated Ethernet Interface for my application under development. Now, I'd like to capture RAW... (1 Reply)
Discussion started by: smanu
1 Replies

8. AIX

New to AIX and got my hands on a RS6000 v.need help getting it on the network

So im fairly new to AIX and my knowledge is very, very limited but i got my hands on an RS6000 43P model and im trying to get it on the network so i can access it from work. I have pretty much tried everything i can/know how to do by reading up as much as i can but im still lost. I have the 43P... (2 Replies)
Discussion started by: IIIII
2 Replies

9. Cybersecurity

How to capture network traffic

Hi, Can someone give me the clue on how to capture network traffic at gateway. Thanx (2 Replies)
Discussion started by: kayode
2 Replies

10. UNIX for Dummies Questions & Answers

how to capture multicast packets using snoop

How do I use snoop command to capture multicast packets in the network? (1 Reply)
Discussion started by: caden312
1 Replies
Login or Register to Ask a Question