[f-nsp] dm raw command output

[Gregory Edigarov]

Everybody,

Thanks for all your replys.

Cliff Fogle wrote:

>Also keep in mind that dm raw only shows packets that hit the CPU.
>Mostly broadcast, multicast and packets with a destination of the switch
>itself.
>
>I've mostly found it useful for tracking down rogue network equipment
>running spanning-tree and detecting a host sending out flow control
>PAUSE frames. 
>
>-----Original Message-----
>From: foundry-nsp-bounces at puck.nether.net
>[mailto:foundry-nsp-bounces at puck.nether.net] On Behalf Of Stephen J.
>Wilcox
>Sent: Thursday, January 19, 2006 10:35 AM
>To: Gregory Edigarov
>Cc: foundry-nsp at puck.nether.net
>Subject: Re: [f-nsp] dm raw command output
>
>without looking, this should work for you:
>
>dm raw filter 0 in-port xx [whatever port you want to view]
>dm raw max 50 [limit to 50 packets]
>dm raw mode brief [one packet per line, brief]
>dm raw [go! type again to stop before you hit the max limit if you want]
>
>you need to delete the filter if you want to change the criteria,
>something like 
>'dm raw filter all none' .. you should be able to work it out from the
>cli help
>
>Steve
>
>On Thu, 19 Jan 2006, Gregory Edigarov wrote:
>
>  
>
>>Hello,
>>
>>what is the full command sequence  for dm raw  subcommands?
>>I wanna  look at the traffic as it  flows through my router. I was
>>    
>>
>told
>  
>
>>that is done with "dm raw mode brief" command, but I cannot get an
>>    
>>
>output.
>  
>
>>Should I look at the console, or there is an option redirecting output
>>    
>>
>
>  
>
>>to where I want?
>>
>>Thank you.
>> 
>>
>>
>>    
>>
>
>_______________________________________________
>foundry-nsp mailing list
>foundry-nsp at puck.nether.net
>http://puck.nether.net/mailman/listinfo/foundry-nsp
>
>
>
>  
>