Table of Contents
Advertisement
IFTRACE ( 1M )
NAME
iftrace – trace host network packets
SYNOPSIS
iftrace [– gdpbhrtn] [– f diskfile] [– i count] [keywords]
DESCRIPTION
iftrace allows the super-user to trace packets at the interface level. The traced
packets may be those received, sent, or both. A filtering facility is provided to dis-
card broadcast packets (-b), to select received (-r) and/or transmitted (-t) packets,
as well as to filter packets based upon keywords. Packets may be captured to a disk
file or displayed as captured. The default display decodes as much of the
datagram's protocol as possible. Currently, only DOD IP and AppleTalk
datagram protocols are supported in this manner. All other datagram types are
captured and displayed in a hexadecimal dump format.
The options have the following meaning:
– g
Get packets. This option primes the driver for packet capture. The – r,
– t, – b options specify the capture filter.
– p
Print packets. This option displays the captured packets. If used with
the – g option, the packets are displayed as they are captured. Without
– g, the display comes from the disk file.
– r
Set capture filter to receive. This option is only valid with – g (get pack-
ets). The default is to capture transmit and receive packets. Specifica-
tion of either – r or – t will reset default filter.
– t
Set capture filter to transmit. This option is only valid with – g (get
packets). The default is to capture transmit and receive packets. Specifi-
cation of either – r or – t will reset default filter.
– b
Set capture filter to ignore broadcasts. This option is only valid with – g
(get packets). This option does not reset the default filter.
– h
By default, packets are interpreted and displayed in a verbose format.
This option interprets Ethernet Type II, IEEE802.3, and IEEE802.2
LLC/SNAP headers, and displays the rest of the packets in a hexade-
cimal dump format.
– n
Display host addresses in numerical format. The default display
translates addresses into host names. This option is only valid with – p
set. When using – gp, this option is recommended since packets are pro-
cessed faster.
– f diskfile
Specify a diskfile for capture or display. The default filename is
/var/adm/lcs/iftrace.data.
– i count
Capture count packets and quit. This option is only valid with – g (get
packets). The default action is to capture until killed.
E-24
IFTRACE
Issue 3
Advertisement
Chapters
Table of Contents
