Hello World!
Our Network admin has been working with Cisco to troubleshoot some issues (limited to 1 switch on 1 particular floor). While our Filers are not involved in this issue, fingers are generally pointed in that direction just because they exist....on the network. Our network admin is looking for information from the Filers that would be akin to a TCP dump. Ifstat, netstat and statit output are not providing the information being looked for (handshake info, etc). I haven't run across this particular issue before and don't recall ever seeing it presented to Toasters. Does anyone know of a way to get the actual communication dumps (again, a TCP dump) from a Filer?
Thanks!
Steve
Use the advanced command PKTT on the filer. It is similar to a SNIFFER capture and can be decoded by ETHEREAL.
________________________________
From: owner-toasters@mathworks.com [mailto:owner-toasters@mathworks.com] On Behalf Of Pazder, Steve B Sent: Tuesday, April 24, 2007 12:38 PM To: toasters@mathworks.com Subject: network troubleshooting
Hello World!
Our Network admin has been working with Cisco to troubleshoot some issues (limited to 1 switch on 1 particular floor). While our Filers are not involved in this issue, fingers are generally pointed in that direction just because they exist....on the network. Our network admin is looking for information from the Filers that would be akin to a TCP dump. Ifstat, netstat and statit output are not providing the information being looked for (handshake info, etc). I haven't run across this particular issue before and don't recall ever seeing it presented to Toasters. Does anyone know of a way to get the actual communication dumps (again, a TCP dump) from a Filer?
Thanks!
Steve
Confidentiality Notice:
This e-mail is intended only for the personal and confidential use of the individual to whom it is addressed and may contain information that is privileged, confidential and protected by law. If you are not the intended recipient, you are hereby notified that any use or disclosure of this information is strictly prohibited. If you have received this message in error, please notify the sender immediately by reply e-mail and delete the original message. Your compliance is appreciated.
Perfect answer at blazing speed. Thanks everyone! It also gave me a "Doh!" moment as this was part of NetApp 101. I appreciate no one pointing this out! <sheepish grin>
Steve
________________________________
From: Crawford, Mark (CBC) [mailto:Mark.Crawford@CapBlueCross.COM] Sent: Tuesday, April 24, 2007 12:12 PM To: Pazder, Steve B; toasters@mathworks.com Subject: RE: network troubleshooting
Use the advanced command PKTT on the filer. It is similar to a SNIFFER capture and can be decoded by ETHEREAL.
________________________________
From: owner-toasters@mathworks.com [mailto:owner-toasters@mathworks.com] On Behalf Of Pazder, Steve B Sent: Tuesday, April 24, 2007 12:38 PM To: toasters@mathworks.com Subject: network troubleshooting
Hello World!
Our Network admin has been working with Cisco to troubleshoot some issues (limited to 1 switch on 1 particular floor). While our Filers are not involved in this issue, fingers are generally pointed in that direction just because they exist....on the network. Our network admin is looking for information from the Filers that would be akin to a TCP dump. Ifstat, netstat and statit output are not providing the information being looked for (handshake info, etc). I haven't run across this particular issue before and don't recall ever seeing it presented to Toasters. Does anyone know of a way to get the actual communication dumps (again, a TCP dump) from a Filer?
Thanks!
Steve
Confidentiality Notice: This e-mail is intended only for the personal and confidential use of the individual to whom it is addressed and may contain information that is privileged, confidential and protected by law. If you are not the intended recipient, you are hereby notified that any use or disclosure of this information is strictly prohibited. If you have received this message in error, please notify the sender immediately by reply e-mail and delete the original message. Your compliance is appreciated.
Do a "man pktt" to get your answer
Sent from my Verizon Wireless BlackBerry
-----Original Message----- From: "Pazder, Steve B" Steve.B.Pazder@dynegy.com Date: Tue, 24 Apr 2007 11:37:53 To:toasters@mathworks.com Subject: network troubleshooting
Hello World! Our Network admin has been working with Cisco to troubleshoot some issues (limited to 1 switch on 1 particular floor). While our Filers are not involved in this issue, fingers are generally pointed in that direction just because they exist....on the network. Our network admin is looking for information from the Filers that would be akin to a TCP dump. Ifstat, netstat and statit output are not providing the information being looked for (handshake info, etc). I haven't run across this particular issue before and don't recall ever seeing it presented to Toasters. Does anyone know of a way to get the actual communication dumps (again, a TCP dump) from a Filer? Thanks! Steve
Cool, at least it's not just my shop. ;o)
I have a tutorial on this command as well.
http://p6.hostingprod.com/@filerjedi.com/blog1/2006/02/packet_traces_smaket_...
That url looks weird but it works. :)
-Blake
On 4/24/07, Paul Keating pkeating@bank-banque-canada.ca wrote:
Cool, at least it's not just my shop. ;o)
--
Hello World!
While our Filers are not involved in this issue, fingers are generally pointed in that direction just because they exist....on the network. ====================================================================================
La version française suit le texte anglais.
This email may contain privileged and/or confidential information, and the Bank of Canada does not waive any related rights. Any distribution, use, or copying of this email or the information it contains by other than the intended recipient is unauthorized. If you received this email in error please delete it immediately from your system and notify the sender promptly by email that you have done so.
Le présent courriel peut contenir de l'information privilégiée ou confidentielle. La Banque du Canada ne renonce pas aux droits qui s'y rapportent. Toute diffusion, utilisation ou copie de ce courriel ou des renseignements qu'il contient par une personne autre que le ou les destinataires désignés est interdite. Si vous recevez ce courriel par erreur, veuillez le supprimer immédiatement et envoyer sans délai à l'expéditeur un message électronique pour l'aviser que vous avez éliminé de votre ordinateur toute copie du courriel reçu.
ditto, mostly because it was the most recently installed device
Paul Keating wrote:
Cool, at least it's not just my shop. ;o)
--
Hello World! While our Filers are not involved in this issue, fingers are generally pointed in that direction just because they exist....on the network.====================================================================================
La version française suit le texte anglais.
This email may contain privileged and/or confidential information, and the Bank of Canada does not waive any related rights. Any distribution, use, or copying of this email or the information it contains by other than the intended recipient is unauthorized. If you received this email in error please delete it immediately from your system and notify the sender promptly by email that you have done so.
Le présent courriel peut contenir de l'information privilégiée ou confidentielle. La Banque du Canada ne renonce pas aux droits qui s'y rapportent. Toute diffusion, utilisation ou copie de ce courriel ou des renseignements qu'il contient par une personne autre que le ou les destinataires désignés est interdite. Si vous recevez ce courriel par erreur, veuillez le supprimer immédiatement et envoyer sans délai à l'expéditeur un message électronique pour l'aviser que vous avez éliminé de votre ordinateur toute copie du courriel reçu.
Hi,
one hint...if you use pktt and use etherreal to look at the output be aware that etherreal will find some wrong checksums in TCP packets. This is no error but some kind of problem with network drivers.
http://now.netapp.com/NOW/cgi-bin/bol?Type=Detail&Display=78980
Just for information, thus you will not get a heart atack when seeing all the checksum errors :D
Regards
Jochen
-----Original Message----- From: owner-toasters@mathworks.com [mailto:owner-toasters@mathworks.com] On Behalf Of Jack Lyons Sent: Wednesday, April 25, 2007 12:28 AM To: Paul Keating Cc: toasters@mathworks.com Subject: Re: network troubleshooting
ditto, mostly because it was the most recently installed device
Paul Keating wrote:
Cool, at least it's not just my shop. ;o)
--
Hello World! While our Filers are not involved in this issue, fingers are generally pointed in that direction just because they exist....on the network.====================================================================================
La version française suit le texte anglais.
This email may contain privileged and/or confidential information, and the Bank of Canada does not waive any related rights. Any distribution, use, or copying of this email or the information it contains by other than the intended recipient is unauthorized. If you received this email in error please delete it immediately from your system and notify the sender promptly by email that you have done so.
Le présent courriel peut contenir de l'information privilégiée ou confidentielle. La Banque du Canada ne renonce pas aux droits qui s'y rapportent. Toute diffusion, utilisation ou copie de ce courriel ou des renseignements qu'il contient par une personne autre que le ou les destinataires désignés est interdite. Si vous recevez ce courriel par erreur, veuillez le supprimer immédiatement et envoyer sans délai à l'expéditeur un message électronique pour l'aviser que vous avez éliminé de votre ordinateur toute copie du courriel reçu.
Pktt is your friend.
On 4/24/07, Pazder, Steve B Steve.B.Pazder@dynegy.com wrote:
Hello World!
Our Network admin has been working with Cisco to troubleshoot some issues (limited to 1 switch on 1 particular floor). While our Filers are not involved in this issue, fingers are generally pointed in that direction just because they exist....on the network. Our network admin is looking for information from the Filers that would be akin to a TCP dump. Ifstat, netstat and statit output are not providing the information being looked for (handshake info, etc). I haven't run across this particular issue before and don't recall ever seeing it presented to Toasters. Does anyone know of a way to get the actual communication dumps (again, a TCP dump) from a Filer?
Thanks!
Steve
Yes, it's called 'pktt'. The command is hidden, but you don't need to change the priv level, it will work from admin mode. The output from pktt is tcpdump format.
-- Adam Fox adamfox@netapp.com
________________________________
From: Pazder, Steve B [mailto:Steve.B.Pazder@dynegy.com] Sent: Tuesday, April 24, 2007 12:38 PM To: toasters@mathworks.com Subject: network troubleshooting
Hello World!
Our Network admin has been working with Cisco to troubleshoot some issues (limited to 1 switch on 1 particular floor). While our Filers are not involved in this issue, fingers are generally pointed in that direction just because they exist....on the network. Our network admin is looking for information from the Filers that would be akin to a TCP dump. Ifstat, netstat and statit output are not providing the information being looked for (handshake info, etc). I haven't run across this particular issue before and don't recall ever seeing it presented to Toasters. Does anyone know of a way to get the actual communication dumps (again, a TCP dump) from a Filer?
Thanks!
Steve
Hi Steve,
I think what you are looking for is a packet trace. Here's the command:
fas6070a*> pktt Usage: pktt start <if>|all [-d dir] [-m pklen] [-b bsize] [-i ipaddr -i ...] pktt pause <if>|all pktt dump [<if>|all [-d dir]] | [<if> [-f file]] pktt stop <if>|all pktt status [<if>|all] [-v] pktt delete [filename.trc]+ pktt list fas6070a*>
example:
pktt start e0 {do the network connecction that you want to trace; try to be quick so that you don't have so much traffic to analyze.) pktt dump pktt stop
The file will be created at the root of the root volume. (or you can specify the directory to write the file with the -d option)
You can read the file with Ethereal or any packet trace analyzer.
Would like to know if this works for you!
Thanks,
Deborah ________________________________
From: Pazder, Steve B [mailto:Steve.B.Pazder@dynegy.com] Sent: Tuesday, April 24, 2007 9:38 AM To: toasters@mathworks.com Subject: network troubleshooting
Hello World!
Our Network admin has been working with Cisco to troubleshoot some issues (limited to 1 switch on 1 particular floor). While our Filers are not involved in this issue, fingers are generally pointed in that direction just because they exist....on the network. Our network admin is looking for information from the Filers that would be akin to a TCP dump. Ifstat, netstat and statit output are not providing the information being looked for (handshake info, etc). I haven't run across this particular issue before and don't recall ever seeing it presented to Toasters. Does anyone know of a way to get the actual communication dumps (again, a TCP dump) from a Filer?
Thanks!
Steve
-
Blake Golliher -
Crawford, Mark (CBC) -
Fox, Adam -
Jack Lyons -
Paul Keating -
Pazder, Steve B -
Rousseau, Deborah -
Tim McCarthy -
Willeke, Jochen