[f-nsp] dm raw command output

[Cliff Fogle]

Also keep in mind that dm raw only shows packets that hit the CPU.
Mostly broadcast, multicast and packets with a destination of the switch
itself.

I've mostly found it useful for tracking down rogue network equipment
running spanning-tree and detecting a host sending out flow control
PAUSE frames. 

-----Original Message-----
From: foundry-nsp-bounces at puck.nether.net
[mailto:foundry-nsp-bounces at puck.nether.net] On Behalf Of Stephen J.
Wilcox
Sent: Thursday, January 19, 2006 10:35 AM
To: Gregory Edigarov
Cc: foundry-nsp at puck.nether.net
Subject: Re: [f-nsp] dm raw command output

without looking, this should work for you:

dm raw filter 0 in-port xx [whatever port you want to view]
dm raw max 50 [limit to 50 packets]
dm raw mode brief [one packet per line, brief]
dm raw [go! type again to stop before you hit the max limit if you want]

you need to delete the filter if you want to change the criteria,
something like 
'dm raw filter all none' .. you should be able to work it out from the
cli help

Steve

On Thu, 19 Jan 2006, Gregory Edigarov wrote:

> Hello,
> 
> what is the full command sequence  for dm raw  subcommands?
> I wanna  look at the traffic as it  flows through my router. I was
told
> that is done with "dm raw mode brief" command, but I cannot get an
output.
> Should I look at the console, or there is an option redirecting output

> to where I want?
> 
> Thank you.
>  
> 
> 

_______________________________________________
foundry-nsp mailing list
foundry-nsp at puck.nether.net
http://puck.nether.net/mailman/listinfo/foundry-nsp