PPT Slide

tcpdump: a public-domain tool to capture and analyze network packets. Network interface must be set to promiscuous mode to capture all network traffic.

07:19:06.969538 arp who-has cup6-gw tell hpcupjf2

07:19:06.996540 arp reply cup6-gw is-at 0:60:3e:81:6:5

07:19:06.996943 hpcupjf2.3356 > wind.cup.hp.com.8088: tcp 0 (DF)

07:19:07.058831 wind.cup.hp.com.8088 > hpcupjf2.3356: tcp 0 (DF)

07:19:07.058991 hpcupjf2.3356 > wind.cup.hp.com.8088: tcp 0 (DF)

07:19:07.059154 hpcupjf2.3356 > wind.cup.hp.com.8088: tcp 297 (DF)

07:19:07.132679 wind.cup.hp.com.8088 > hpcupjf2.3356: tcp 0 (DF)

07:19:07.185148 wind.cup.hp.com.8088 > hpcupjf2.3356: tcp 420 (DF)

07:19:07.226956 wind.cup.hp.com.8088 > hpcupjf2.3356: tcp 1460 (DF)

07:19:07.228876 wind.cup.hp.com.8088 > hpcupjf2.3356: tcp 25 (DF)

Monitoring your network -

using tcpdump

IP-Ethernet address translation

- broadcast ARP request

- router (address 1) returns info

Previous slide

Next slide

Back to first slide

View graphic version

Send email to Interex or to theWebmaster
©Copyright 1998 Interex. All rights reserved.