Subject: | |
From: | |
Reply To: | |
Date: | Tue, 30 Jan 2001 09:53:51 +0530 |
Content-Type: | text/plain |
Parts/Attachments: |
|
|
If you want to look at all network traffic between your 3K and any
other machine *AND* you have a Windows/UNIX machine on the same
physical network then you can use a tool called windump/tcpdump to
capture all the n/w traffic. Windump/tcpdump runs on Windows/UNIX
machines.
Windump can be freely downloaded from -
http://netgroup-serv.polito.it/windump/install/Default.htm. Tcpdump
for UNIX is also freely available for various implementations. It just
takes 10 minutes to download and configure windump.
windump/tcpdump can take a complex expression as an argument to filter
the network traffic. If 3k1 and 3k2 are names of two machines, then to
see all the traffic that flows between 3k1 and 3k2 issue the command -
windump host 3k1 and 3k2
You will get output which looks like -
09:27:01.210770 3k1.xx.yy.com.2828 > 3k2.xx.yy.com.6000: P 626045261:626045281(20) ack 1399129 win 32768 (DF)
09:27:01.368015 3k2.xx.yy.com.6000 > 3k1.xx.yy.com.2828: . ack 20 win 8500 (DF)
09:27:01.461149 3k1.xx.yy.com.2828 > 3k2.xx.yy.com.6000: P 20:40(20) ack 1 win 32768 (DF)
09:27:01.568299 3k2.xx.yy.com.6000 > 3k1.xx.yy.com.2828: . ack 40 win 8480 (DF)
09:27:01.719852 3k1.xx.yy.com.2828 > 3k2.xx.yy.com.6000: P 40:60(20) ack 1 win 32768 (DF)
09:27:01.868738 3k2.xx.yy.com.6000 > 3k1.xx.yy.com.2828: . ack 60 win 8460 (DF)
09:27:01.970297 3k1.xx.yy.com.2828 > 3k2.xx.yy.com.6000: P 60:80(20) ack 1 win 32768 (DF)
09:27:02.169174 3k2.xx.yy.com.6000 > 3k1.xx.yy.com.2828: . ack 80 win 8440 (DF)
09:27:02.220738 3k1.xx.yy.com.2828 > 3k2.xx.yy.com.6000: P 80:100(20) ack 1 win 32768 (DF)
09:27:02.369458 3k2.xx.yy.com.6000 > 3k1.xx.yy.com.2828: . ack 100 win 8420 (DF)
09:27:02.471155 3k1.xx.yy.com.2828 > 3k2.xx.yy.com.6000: P 100:120(20) ack 1 win 32768 (DF)
Similarly, if you would like to capture all the traffic that flows
to/from say machine 3k1 then you need to issue the command -
windump host 3k1
I find this tool very useful. It is like a simple protocol analyzer.
Ganesh HS,
CSY Networking Lab.
> Hello List,
>
> What can I do on the 3000 to monitor the amount of network activity in
> near-real time?
>
> I am looking at a client/server process where both sides were developed
> in-house. We have assessed al other performance criteria except the traffic
> between the client and the server.
>
> Short of external devices like protocol analyzers, what can I run on the 3K
> to get an idea of the relative impact to networking.
>
> Are there specific processes I can monitor with Glance/iX to get the
> relative level of activity?
>
> Thanks,
>
> Dave
>
--
Regards,
Ganesh HS.
_______________________________________________________________________________
Ganesh HS | E-mail : [log in to unmask]
HP-(ISO) Pvt. Ltd., |
29, Cunningham Road | Phone : External : (408) 447 0375
India | Fax
| Voice Mail: 408-447-0375
Disclaimer: Comments are my own, not HP's
_______________________________________________________________________________
|
|
|