Yes, snoop seems to do the trick. Thanks.

Edward.

-----Original Message----- From: Muhlestein, Mark [mailto:mark.muhlestein@netapp.com] Sent: Friday, February 02, 2001 5:41 PM To: Edward Hibbert; Labelle, Steven Cc: 'toasters@mathworks.com' Subject: RE: Decoding pktt trace

If you mean NLM == NFS Lock Manager, then "snoop" on Sun boxes should work better. You can use "editcap" from the Ethereal package to convert to snoop format first. Editcap also works for converting to NetMon, and a bunch of other formats.

Mark

-----Original Message----- From: Labelle, Steven [mailto:Steven.Labelle@netapp.com] Sent: Friday, February 02, 2001 10:24 AM To: 'Edward Hibbert'; toasters@mathworks.com Subject: !RE: Decoding pktt trace

Edward,

My preferred method is to convert the pktt trace to the Windows NT Server Network Monitor (Netmon) format using the capconv.exe program available on the Network Appliance NOW site download page. Then I use Netmon to look at the trace in whatever way I please.

Steve

-----Original Message----- From: Edward Hibbert [mailto:EH@dataconnection.com] Sent: Friday, February 02, 2001 9:09 AM To: toasters@mathworks.com Subject: Decoding pktt trace

I have occasion to look very hard at some pktt trace. I'm using Ethereal to do this, but it doesn't decode inside NLM packets to make them nice and readable for me. Do any of you folk know anything which would?

Regards,

Edward Hibbert Internet Applications Group Data Connection Ltd Tel: +44 131 662 1212 Fax: +44 131 662 1345 Email: eh mailto:eh@dataconnection.com @dataconnection.com Web: http://www.dat http://www.dat aconnection.com