Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

  • Congratulations strongm on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

iptrace and ipreport - cannot see actual data in packet

Status
Not open for further replies.

ytakbob

Programmer
Jul 20, 2000
105
US
doing iptrace iptrace -i en0 -s 10.246.35.38 -b /Arc/mltrace
and ipreport /Arc/mltrace but dont see data in the packet...
is there an option where I can see theactual data contained in the packet ?

THis is basically what I got when tthe data went out:
====( 1514 bytes received on interface en0 )==== 09:47:51.922650050
ETHERNET packet : [ 00:0c:31:08:c7:fc -> 02:07:01:24:28:e2 ] type 800 (IP)
IP header breakdown:
< SRC = 10.246.35.38 > (hm_mlink_t)
< DST = 10.246.34.41 > (testJ50)
ip_v=4, ip_hl=20, ip_tos=0, ip_len=1500, ip_id=48023, ip_off=0 DF
ip_ttl=125, ip_sum=e14e, ip_p = 1 (ICMP)
ICMP header breakdown:
icmp_type=0 (ECHO_REPLY) icmp_id=0 icmp_seq=0



Bob Schmid
bob_schmid@hmis.org
330-746-1010 ext. 1347
 
hello,

try :
iptrace -a -b -d IP_OF_THE_HOST_YOU_TALK_TO log.log

then after a while stop the iptrace by :
kill PID_OF_THE_IPTRACE_COMMAND
(check with ps -e | grep iptrace)

then

ipreport -rns ./log.log | more

regards;
letis
 
Status
Not open for further replies.

Part and Inventory Search

Sponsor

Back
Top