@@ -5,14 +5,14 @@ HP-UX and cannot upgrade, please continue reading.
55HP-UX patches to fix packet capture problems
66
77Note that packet-capture programs such as tcpdump may, on HP-UX, not be
8- able to see packets sent from the machine on which they're running.
8+ able to see packets sent from the machine on which they're running.
99Some articles on groups.google.com discussing this are:
1010
1111 http://groups.google.com/groups?selm=82ld3v%2480i%241%40mamenchi.zrz.TU-Berlin.DE
1212
1313which says:
1414
15- Newsgroups: comp.sys.hp.hpux
15+ Newsgroups: comp.sys.hp.hpux
1616 Subject: Re: Did someone made tcpdump working on 10.20 ?
1717 Date: 12/08/1999
1818 From: Lutz Jaenicke <
[email protected] >
@@ -27,14 +27,14 @@ which says:
2727 >must me "patched" (poked) in order to see outbound data in promiscuous mode.
2828 >Many things to do .... So the question is : did someone has already this
2929 >"ready to use" PHNE_**** patch ?
30-
30+
3131 Two things:
3232 1. You do need a late "LAN products cumulative patch" (e.g. PHNE_18173
3333 for s700/10.20).
3434 2. You must use
3535echo 'lanc_outbound_promisc_flag/W1' | /usr/bin/adb -w /stand/vmunix /dev/kmem
3636 You can insert this e.g. into /sbin/init.d/lan
37-
37+
3838 Best regards,
3939 Lutz
4040
4444
4545which says:
4646
47- Newsgroups: comp.sys.hp.hpux
47+ Newsgroups: comp.sys.hp.hpux
4848 Subject: Re: tcpdump only shows incoming packets
4949 Date: 02/15/2000
5050 From: Rick Jones <
[email protected] >
@@ -56,12 +56,12 @@ which says:
5656 > outgoing. I have tried tcpflow-0.12 which also uses libpcap and the
5757 > same thing happens. Could someone please give me a hint on how to
5858 > get this right?
59-
59+
6060 Search/Read the archives ?-)
61-
61+
6262 What you are seeing is expected, un-patched, behaviour for an HP-UX
6363 system. On 11.00, you need to install the latest lancommon/DLPI
64- patches, and then the latest driver patch for the interface(s) in use.
64+ patches, and then the latest driver patch for the interface(s) in use.
6565 At that point, a miracle happens and you should start seeing outbound
6666 traffic.
6767
@@ -79,15 +79,15 @@ which says:
7979 From: Harald Skotnes <
[email protected] >
8080
8181 Rick Jones wrote:
82-
82+
8383 ...
8484
8585 > What you are seeing is expected, un-patched, behaviour for an HP-UX
8686 > system. On 11.00, you need to install the latest lancommon/DLPI
8787 > patches, and then the latest driver patch for the interface(s) in
8888 > use. At that point, a miracle happens and you should start seeing
8989 > outbound traffic.
90-
90+
9191 Thanks a lot. I have this problem on several machines running HPUX
9292 10.20 and 11.00. The machines where patched up before y2k so did not
9393 know what to think. Anyway I have now installed PHNE_19766,
101101
102102 Date: Mon, 29 Apr 2002 15:59:55 -0700
103103 From: Rick Jones
104- 104+ 105105 Subject: Re: [tcpdump-workers] I Can't Capture the Outbound Traffic
106106
107107 ...
@@ -130,21 +130,21 @@ captures on HP-UX 9.x:
130130
131131 Dave Barr (
[email protected] ) wrote:
132132 : Has anyone ported tcpdump (or something similar) to HP/UX 9.x?
133-
133+
134134 I'm reasonably confident that any port of tcpdump to 9.X would require
135135 the (then optional) STREAMS product. This would bring DLPI, which is
136136 what one uses to access interfaces in promiscuous mode.
137-
137+
138138 I'm not sure that HP even sells the 9.X STREAMS product any longer,
139139 since HP-UX 9.X is off the pricelist (well, maybe 9.10 for the old 68K
140- devices).
141-
140+ devices).
141+
142142 Your best bet is to be up on 10.20 or better if that is at all
143- possible. If your hardware is supported by it, I'd go with HP-UX 11.
143+ possible. If your hardware is supported by it, I'd go with HP-UX 11.
144144 If you want to see the system's own outbound traffic, you'll never get
145145 that functionality on 9.X, but it might happen at some point for 10.20
146- and 11.X.
147-
146+ and 11.X.
147+
148148 rick jones
149149
150150(as per other messages cited here, the ability to see the system's own
@@ -178,12 +178,12 @@ An additional note, from Jost Martin, for HP-UX 10.20:
178178 (thanks to
[email protected] (Ralf Hildebrandt) who
179179 posted the security-part some time ago)
180180
181- <<hack_ip_stack>>
181+ <<hack_ip_stack>>
182182
183183 (Don't switch IP-forwarding off, if you need it !)
184184 Install the hack as /sbin/init.d/hacl_ip_stack (adjust
185185 permissions !) and make a sequencing-symlink
186- /sbin/rc2.d/S350hack_ip_stack pointing to this script.
186+ /sbin/rc2.d/S350hack_ip_stack pointing to this script.
187187 Now all this is done on every reboot.
188188
189189According to Rick Jones, the global promiscuous switch also has to be
0 commit comments