tailieunhanh - Managing NFS and NIS 2nd phần 8

snoop phân tích mạng snoop kèm với Solaris nắm bắt các gói tin từ mạng và hiển thị chúng trong các hình thức khác nhau theo các thiết lập của các bộ lọc quy định. Snoop có thể capture lưu lượng mạng và hiển thị nó trên bay, hoặc lưu nó vào một tập tin để phân tích trong tương lai. | Managing NFS and NIS snoop The snoop network analyzer bundled with Solaris captures packets from the network and displays them in various forms according to the set of filters specified. Snoop can capture network traffic and display it on the fly or save it into a file for future analysis. Being able to save the network traffic into a file allows you to display the same data set under various filters presenting different views of the same information. In its simplest form snoop captures and displays all packets present on the network interface snoop Using device dev hme promiscuous mode narwhal - UDP D 7204 S 32823 LEN 252 2100 56 a00 20ff fe8f ba43 - solicitation caramba - schooner schooner - caramba caramba - schooner Seq 2752257980 Len 0 Win 24820 caramba - schooner schooner - caramba mp-broadcast - caramba - schooner Seq 2752258092 Len 0 Win 24820 ff02 1 ffb6 12ac ICMPv6 Neighbor NFS C GETATTR3 FH 0CAE NFS R GETATTR3 OK TCP D 2049 S 1023 Ack 341433529 NFS C GETATTR3 FH B083 NFS R GETATTR3 OK UDP D 7204 S 32852 LEN 177 TCP D 2049 S 1023 Ack 341433645 By default snoop displays only a summary of the data pertaining to the highest level protocol. The first column displays the source and destination of the network packet in the form source - destination . Snoop maps the IP address to the hostname when possible otherwise it displays the IP address. The second column lists the highest level protocol type. The first line of the example shows the host narwhal sending a request to the address over UDP. The second line shows a neighbor solicitation request initiated by the host with global IPv6 address 2100 56 a00 20ff fe8f ba43. The destination is a link-local multicast address prefix FF02 . The contents of the third column depend on the protocol. For example the 252 byte-long UDP packet in the first line has a destination port 7204 and a source port 32823. NFS packets use a C to denote a call and an R to denote a reply .