toasters

toasters@lists.teaparty.net

2 participants
13529 discussions

Re: filer-side packet tracing.
by Jagan Bearelly 10 Mar '00

10 Mar '00

Steve, The solaris command "captrans" can be used for conversion and Solaris has man pages for this command. For example, to convert pktt trace file called "e0.trc" into a snoop format, the following command works on Solaris: captrans -f snoop e0.trc > e0.trc.snoop Please let me know if you need man pages for "captrans". I hope that helps. Regards, Jagan > From armijo(a)cs.unm.edu Fri Mar 10 15:07:59 2000 > Date: Fri, 10 Mar 2000 15:59:35 -0700 > From: Steve Armijo <armijo(a)cs.unm.edu> > To: Jonas Jonsson <jonas.jonsson(a)proact.se> > Cc: "'Steve Armijo'" <armijo(a)cs.unm.edu>, "Fox, Adam" <Adam.Fox(a)netapp.com>, > toasters(a)mathworks.com > Subject: Re: filer-side packet tracing. > Mime-Version: 1.0 > > On Fri, Mar 10, 2000 at 11:59:30AM +0100, Jonas Jonsson wrote: > > > > Well, > > > > In netcache v4.1 there is a presentation of this so it > > is somewhat documented. > > > > I can't say that I know the documentation of the filer side as > > well ;) > > > > > -----Original Message----- > > > From: Steve Armijo [mailto:armijo@cs.unm.edu] > > > Sent: den 10 mars 2000 10:34 > > > To: Fox, Adam > > > Cc: 'Ronan Mullally'; toasters(a)mathworks.com > > > Subject: Re: filer-side packet tracing. > > > > > > > > > On Thu, Mar 09, 2000 at 03:18:52PM -0800, Fox, Adam wrote: > > > > > > > > Yes. pktt will do this. It creates a file in tcpdump format, > > > > which is convertable into snoop with the right utilities. > > > > > > would you folks(NetApp) be willing to share these utilities? > > ok, i guess i should have been more specific. would you be willing to > share the conversion utilities? > > -s > > -- > Cue the music, fade to black, no such thing as no payback. -PWEI > > [ armijo(a)cs.unm.edu ] > >

1 0

RE: filer-side packet tracing.
by Jonas Jonsson 10 Mar '00

10 Mar '00

Well, In netcache v4.1 there is a presentation of this so it is somewhat documented. I can't say that I know the documentation of the filer side as well ;) /// Cheers, Jonas Performance, Simplicity, Network Necessity! NetCache! NetCache! PROVEN! FAST & FRESH! NetCache is Scaling the Internet! NetCache is Moving Content to the Edge! Speed! Control! Intelligence! NetCache! This email is cache friendly :) ---------------------------------------- > -----Original Message----- > From: Steve Armijo [mailto:armijo@cs.unm.edu] > Sent: den 10 mars 2000 10:34 > To: Fox, Adam > Cc: 'Ronan Mullally'; toasters(a)mathworks.com > Subject: Re: filer-side packet tracing. > > > On Thu, Mar 09, 2000 at 03:18:52PM -0800, Fox, Adam wrote: > > > > Yes. pktt will do this. It creates a file in tcpdump format, > > which is convertable into snoop with the right utilities. > > would you folks(NetApp) be willing to share these utilities? > > -s > > -- > Cue the music, fade to black, no such thing as no payback. -PWEI > > [ armijo(a)cs.unm.edu ] >

2 1

Re: FW: filer-side packet tracing.
by Guy Harris 10 Mar '00

10 Mar '00

> On Thu, Mar 09, 2000 at 03:18:52PM -0800, Fox, Adam wrote: > > > > Yes. pktt will do this. It creates a file in tcpdump format, > > which is convertable into snoop with the right utilities. > > would you folks(NetApp) be willing to share these utilities? As the author of captrans (the utility in question) and the changes to libpcap required to make it read other capture file formats, I don't have any problem making that stuff available. *However*, there's a better program than captrans - editcap. It's part of the Ethereal packet capture/analysis program package: http://ethereal.zing.org/ and uses the same library that Ethereal (and the text-mode - snoop/tcpdump-like - utility Tethereal that also comes with Ethereal) uses to read and write capture files. That library can read more capture file formats than can the patched libpcap I have here, and can also write more formats than can captrans. I don't plan to add any new capture file formats to the patched libpcap, but there are many people who have added new formats to the Wiretap library in Ethereal, and we will probably continue to add new formats as they come up (and as we can figure them out - a lot of the formats were figured out by reverse-engineering, as no documentation was available). Ethereal requires GLib 1.2[.x] and GTK+ 1.2[.x], so you'd have to have them installed on your system in order to build editcap (unless you tweak the Makefile by hand so as to build only the Wiretap library and editcap, in which case you need only GLib 1.2[.x], but once you've installed GLib, you might as well install GTK+ while you're at it), but, once you've done that, you not only have a program to convert capture files, you have a pretty nice GUI packet capture and analysis program, and a pretty nice text-mode packet capture and analysis program as well. (It also runs on Win32 operating systems such as Windows 9x and Windows NT - you have to get versions of GLib, GTK+, and libpcap that have been ported to Win32, but those all exist, and Ethereal can even capture packets on Win32 OSes with that version of libpcap.) There's also, on the "Download" page of the Ethereal Web site, a list of links to binary packages that have been made of Ethereal - or, at least, links to archive sites for binary packages for various OSes - although there's no guarantee that the latest version of Ethereal has been so packaged, in which case the package might not include editcap or Tethereal.

1 0

RE: filer-side packet tracing.
by Haag,Dennis 10 Mar '00

10 Mar '00

I stand corrected, it was introduced in 5.3. I was not aware of it until 5.3.2. -----Original Message----- From: Haag,Dennis [mailto:Dennis.Haag@netapp.com] Sent: Friday, March 10, 2000 6:54 AM To: 'toasters(a)mathworks.com' Subject: RE: filer-side packet tracing. Pktt was introduced in 5.3.2 as an rc_toggle_basic command, it was changed to a regular command in 5.3.4. Although it doesn't show up on the list when you type ? it is there. -----Original Message----- From: Steve Armijo [mailto:armijo@cs.unm.edu] Sent: Friday, March 10, 2000 1:34 AM To: Fox, Adam Cc: 'Ronan Mullally'; toasters(a)mathworks.com Subject: Re: filer-side packet tracing. On Thu, Mar 09, 2000 at 03:18:52PM -0800, Fox, Adam wrote: > > Yes. pktt will do this. It creates a file in tcpdump format, > which is convertable into snoop with the right utilities. would you folks(NetApp) be willing to share these utilities? -s -- Cue the music, fade to black, no such thing as no payback. -PWEI [ armijo(a)cs.unm.edu ]

1 0

RE: filer-side packet tracing.
by Fox, Adam 10 Mar '00

10 Mar '00

> > On Thu, Mar 09, 2000 at 03:18:52PM -0800, Fox, Adam wrote: > > > > Yes. pktt will do this. It creates a file in tcpdump format, > > which is convertable into snoop with the right utilities. > > would you folks(NetApp) be willing to share these utilities? > Aaron Simms mentioned etherreal which is publically available. We do provide the tcpdump program on NOW if you can't find it anywhere else. I may have to check on the availability of other tools. -- Adam Fox NetApp Professional Services, NC adamfox(a)netapp.com

1 0

RE: filer-side packet tracing.
by Haag,Dennis 10 Mar '00

10 Mar '00

Pktt was introduced in 5.3.2 as an rc_toggle_basic command, it was changed to a regular command in 5.3.4. Although it doesn't show up on the list when you type ? it is there. -----Original Message----- From: Steve Armijo [mailto:armijo@cs.unm.edu] Sent: Friday, March 10, 2000 1:34 AM To: Fox, Adam Cc: 'Ronan Mullally'; toasters(a)mathworks.com Subject: Re: filer-side packet tracing. On Thu, Mar 09, 2000 at 03:18:52PM -0800, Fox, Adam wrote: > > Yes. pktt will do this. It creates a file in tcpdump format, > which is convertable into snoop with the right utilities. would you folks(NetApp) be willing to share these utilities? -s -- Cue the music, fade to black, no such thing as no payback. -PWEI [ armijo(a)cs.unm.edu ]

1 0

Sequential reads on NetApps
by Riasat_Amin＠notes.amdahl.com 10 Mar '00

10 Mar '00

Can anybody tell me how the NetApps box performs with sequential reads with a database that has grown slowly over time ? I understand that the WAFL fs does not re-write the modified data block to the same place but writes it anywhere ie. to the current position of the heads. Does this mean that the heads get thrashed around when a full sequential read is performed on the data base and consequentially the reads are slow compared to doing random reads? Any information on this would be gratefully received Rgds Riasat

1 0

RE: filer-side packet tracing.
by Fox, Adam 10 Mar '00

10 Mar '00

> Folks, > > Is there any facility on a filer to run a packet trace similar to > something like snoop or tcpdump on a unix host? > > Yes. pktt will do this. It creates a file in tcpdump format, which is convertable into snoop with the right utilities. Hope this helps. -- Adam Fox NetApp Professional Services, NC adamfox(a)netapp.com

2 1

RE: filer-side packet tracing.
by Sims, Aaron 10 Mar '00

10 Mar '00

I will often use 'ethereal' to load up the packet dumps and view them in a nice graphical manner. You can find ethereal at: http://ethereal.zing.org/ Aaron -- Aaron Sims Professional Services Engineer Network Appliance aaron.sims(a)netapp.com 404-226-7382 (cell) 408-822-8947 (voice mail) > -----Original Message----- > From: Fox, Adam [mailto:Adam.Fox@netapp.com] > Sent: Thursday, March 09, 2000 6:19 PM > To: 'Ronan Mullally'; toasters(a)mathworks.com > Subject: RE: filer-side packet tracing. > > > > Folks, > > > > Is there any facility on a filer to run a packet trace similar to > > something like snoop or tcpdump on a unix host? > > > > > > Yes. pktt will do this. It creates a file in tcpdump format, > which is convertable into snoop with the right utilities. > > Hope this helps. > > -- Adam Fox > NetApp Professional Services, NC > adamfox(a)netapp.com > >

1 0

RE: Filer showing held locks
by Sims, Aaron 10 Mar '00

10 Mar '00

One of the fields that 'lock_dump' produces is the inode for the file held. I will often use 'find' and specify the inode number to figure out which file is locked. You'll probably have to convert the inode number from hex to decimal. Aaron -- Aaron Sims Professional Services Engineer Network Appliance aaron.sims(a)netapp.com 404-226-7382 (cell) 408-822-8947 (voice mail) > -----Original Message----- > From: Muhlestein, Mark [mailto:mark.muhlestein@netapp.com] > Sent: Thursday, March 09, 2000 7:04 PM > To: 'Stephen C. Woods' > Cc: 'toasters(a)mathworks.com' > Subject: RE: Filer showing held locks > > > You can use the rc_toggle_basic command lock_dump: > > lock_dump -f > lock_dump -h > > -f dumps by file, -h dumps by host. > > Mark Muhlestein -- mmm(a)netapp.com > > -----Original Message----- > From: Stephen C. Woods [mailto:scw@seas.ucla.edu] > Sent: Thursday, March 09, 2000 3:17 PM > To: toasters(a)mathworks.com > Subject: Filer showing held locks > > > Is it possable to see file locks on a filer? > That is to say, 'Is there an equivalent to lslk?'. > > ----- > Stephen C. Woods; UCLA SEASnet; 2567 Boelter hall; LA CA 90095; > (310)-825-8614 > Finger for public key scw(a)cirrus.seas.ucla.edu,Internet > mail:scw@SEAS.UCLA.EDU >

1 0

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

2003

2002

2001

2000

1999

1998

1997

toasters