nettl.1m (2010 09)

ManualsBrandsHP ManualsSoftwareHP-UX Manpages

nettl(1M) nettl(1M)

NAME

nettl - control network tracing and logging

SYNOPSIS

/usr/sbin/nettl -start

/usr/sbin/nettl -stop

/usr/sbin/nettl -firmlog 0

|1|2 -card dev_name ...

/usr/sbin/nettl -log

class ... -entity subsystem ...

/usr/sbin/nettl -status

[log|trace|all]

/usr/sbin/nettl -traceon

kind... -entity subsystem ... [-card

dev_name ...]

[

-file tracename ][-m

bytes ][-size portsize ][-tracemax maxsize ][-n num_ﬁles]

[

-mem init_mem [max_mem]] [-bind

cpu_id ][-timer timer_value ]

/usr/sbin/nettl -bind

cpu_id

/usr/sbin/nettl -timer

timer_value

/usr/sbin/nettl -traceoff -entity

subsystem ...

/usr/sbin/nettl -setfilter

ﬁlter_ﬁle

/usr/sbin/nettl -filteron

subsystem ...

/usr/sbin/nettl -filteroff

subsystem ...

/usr/sbin/nettl -displayfilter

subsystem ...

/usr/sbin/nettl -removefilter

subsystem ...

DESCRIPTION

The

nettl command is a tool used to capture network events or packets. Logging is a means of captur-

ing network activities such as state changes, errors, and connection establishment. Tracing is used to

capture or take a snapshot of inbound and outbound packets going through the network, as well as loop-

back or header information. A subsystem is a particular network module that can be acted upon, such as

ns_ls_driver,orSX25L2. nettl is used to control the network tracing and logging facility.

Except for the

-status option, nettl can be used only by users who have an effective user ID of 0.

Options

nettl recognizes the following options, which can be used only in the combinations indicated in

SYNOPSIS. Some option and argument keywords can be abbreviated as described below. All keywords

are case-insensitive.

-start (Abbr.: -st)

Used alone without other options.

Initialize the tracing and logging facility, start up default logging, and optionally start up

console logging. Logging is enabled for all subsystems as determined by the

/etc/nettlgen.conf ﬁle. Log messages are sent to a log ﬁle whose name is deter-

mined by adding the sufﬁx .LOG000 to the log ﬁle name speciﬁed in the

/etc/nettlgen.conf conﬁguration ﬁle. Console logging is started if console logging

has been conﬁgured in the /etc/nettlgen.conf ﬁle. See nettlconf (1M) and

nettlgen.conf (4) for an explanation of the conﬁguration ﬁle. If the log ﬁle (with sufﬁx)

already exists, it is opened in append mode; that is, new data is added to the ﬁle. The

default name is /var/adm/nettl (thus logging starts to ﬁle

/var/adm/nettl.LOG000). See Data File Management below for more information

on how the log ﬁle is handled.

nettl -start command is performed during system startup if the NETTL variable

in the /etc/rc.config.d/nettl ﬁle has a value of 1.

Note : It is strongly recommended that the tracing and logging facility be turned on

before any networking is started and remain on as long as networking is being used.

Otherwise, information about disasters will be lost. To minimize the impact on the sys-

tem, all subsystems can be set with the

-log option to capture only disaster-class log

messages.

HP-UX 11i Version 3: September 2010 − 1 − Hewlett-Packard Company 1

Summary of content (12 pages)

PAGE 1
nettl(1M) nettl(1M) NAME nettl - control network tracing and logging SYNOPSIS /usr/sbin/nettl -start /usr/sbin/nettl -stop /usr/sbin/nettl -firmlog 0|1|2 -card dev_name ... /usr/sbin/nettl -log class ... -entity subsystem ... /usr/sbin/nettl -status [log|trace|all] /usr/sbin/nettl -traceon kind ... -entity subsystem ... [-card dev_name ...
PAGE 2
nettl(1M) -stop nettl(1M) (Abbr.: -sp) Used alone without other options. Terminate the trace/log facility. Once this command is issued, the trace/log facility is no longer able to accept the corresponding trace/log calls from the network subsystems. Note : See Note for the -start option. -timer (Abbr.: -t) Used with first -traceon option or as a standalone option after tracing has been turned on. Used to set the buffer flush timer; this value is set in seconds. The default value is 5 seconds.
PAGE 3
nettl(1M) nettl(1M) Examples of OSI subsystems: acse_pres asn1 cm em ftam_ftp_gw ftam_init ftam_resp ftam_vfs ftp_ftam_gw hps mms network ots transport ula_utils Examples of LAN subsystems: ns_ls_driver ns_ls_icmp ns_ls_nfs ns_ls_ipv6 ns_ls_loopback ns_ls_tcp ns_ls_udp ns_ls_icmpv6 ns_ls_x25 ns_ls_igmp ns_ls_ip Two X.25-specific subsystems are used for tracing only: SX25L2 SX25L3 -file tracename (Abbr.: -f) Used with the first -traceon option only.
PAGE 4
nettl(1M) nettl(1M) Classes can be specified as keywords or as a single numeric mask depicting which classes to log. The mask is formed by adding the individual masks of the log classes. If you choose to indicate several classes at once, be sure to separate each log class with a space. disaster logging is always on. The default logging classes for each subsystem is configured into the configuration file, /etc/nettlgen.conf.
PAGE 5
nettl(1M) nettl(1M) log Log status information trace Trace status information all Trace and log status information -tracemax maxsize (Abbr.: -tm) Used with first -traceon option only. Tracing uses a circular file method such that when one file fills up, another file is used. The number of trace files that can exist on a system at any given time can be specified using the -n option. See Data File Management below for more information on file behavior.
PAGE 6
nettl(1M) nettl(1M) pduin Inbound Protocol Data Unit (including header and data). pduout Outbound Protocol Data Unit (including header and data). proc Procedure entry and exit. state Protocol or connection states. error Invalid events or condition. logging Special kind of trace that contains a log message. loopback Packets whose source and destination system is the same. For multiple kind s, the masks can be specified separately or combined into a single number.
PAGE 7
nettl(1M) nettl(1M) Used as a standalone option. Used to display the filters and their respective states. If the filter is set or turned on for a subsystem, the filter expression is displayed along with the status of the filter. If no filter is set for a subsystem then the corresponding filter status is mentioned. If the attribute all is specified then filter status is displayed for all the subsystems that currently support filters as listed above. -removefilter all -removefilter subsystem ... (Abbr.
PAGE 8
nettl(1M) nettl(1M) Trace Filters Trace filters are a filter criteria applied on trace packets before actually capturing them. The filter criteria is an expression consisting of a combination of header fields, (link level, TCP/IP and so on) specified in the filter configuration file. Packets that pass the filter criteria are captured; all other packets are discarded. Packets to be captured are selected according to the following table.
PAGE 9
nettl(1M) nettl(1M) NS_LS_IP NS_LS_TCP NS_LS_UDP NS_LS_ICMP ip_src, ip_dst, ip_proto, icmp_type, icmp_code th_sport, th_dport, th_flags uh_sport, uh_dport icmp_type, icmp_code EXTERNAL INFLUENCES International Code Set Support Single and multibyte character code sets are supported in data; single-byte character code sets are supported in file names. EXAMPLES 1. Initialize the tracing/logging facility: nettl -start (See note for the -start option.) 2. Display the status of the tracing/logging facility.
PAGE 10
nettl(1M) 9. nettl(1M) Enable all kinds of tracing for gelan (GELAN driver) with initial trace memory being 256 MB. Binary trace data goes to file /tmp/gelan.TRC000 and combined file size being 128 MB. This example assumes that the -traceon option is being used for the first time. nettl -tn all -e gelan -mem 256M -tm 128M -f /tmp/gelan 10. Enable all kinds of tracing for igelan (IGELAN driver) with initial trace memory being 128 MB and maximum memory that can be allocated being 512 MB.
PAGE 11
nettl(1M) nettl(1M) selective about the number of subsystems being traced, as well as the kinds of trace data being captured. The nettl and netfmt commands read the /etc/nettlgen.conf file each time they are run (see nettl (1M) and netfmt (1M)). If the file becomes corrupted, these commands will no longer be operational. FILES /dev/netlog Kernel log pseudo-device file. /dev/nettrace Kernel trace pseudo-device file. /etc/nettlgen.conf Tracing and logging subsystem configuration file. /etc/rc.config.
PAGE 12
(Notes) A (Notes) nA 12 Hewlett-Packard Company −1− HP-UX 11i Version 3: September 2010