NAME

atdump − dump AppleTalk packets on a network

SYNOPSIS

atdump [ −i interface ] [ −e ] [ −x ] [ −p ] [ −t ] [ −phase EtherTalkPhase ] [ −aarp ] [ −ddp ] [ −rtmp ] [ −nbp ] [ −atp ] [ −aep ] [ −zip ] [ −pap ] [ −asp ] [ −adsp ] [ −other ]

DESCRIPTION

atdump prints out the AppleTalk packets on a network interface according to the specified options.  The TYPE field of DDP packet is used as the selection of RTMP, NBP, AEP, ZIP, ADSP.  In case of the destination socket number or the source socket number is the same as ZIP, the packet is regarded as ZIP packet.  In case that the option asp or pap is specified, atp is automatically added.  However, both asp and pap should not be set at a time.  If any option among rtmp, nbp, atp, aep, zip, adsp and other is not specfied, all packets will print out. 

OPTION

−i Listen on interface. If unspecified, en0 is used. 

−e
Print the link-level header on each line.

−x print each packet in hex and ASCII. 

−p Do not put the interface into promiscuous mode. 

−t
Add a timestamp on each line.

−phase
Specify the version number of EtherTalk. 1 on 2 should be specified.  The default value is ’2’. 

−aarp
Print AARP packets

−ddp Do not print AARP packets

−rtmp
Print RTMP packets

−nbp
Print NBP packets

−atp
Print ATP packets

−aep Print AEP packets

−zip Print ZIP packets Some ZIP packets are the same packet format as ATP.  If you would like to see any ZIP packet, you have to specify the −atp option with −zip. 

−other
Print all packet except the above packets.

−pap Print PAP packets

−asp Print ASP packets

−adsp
Print ADSP packets

EXAMPLES

To print RTMP, NBP, ZIP packets on the interface en0.  # atdump −rtmp −nbp −zip To print PAP packets on the interface en1. # atdump −i en1 −pap

BUGS

The only root runs this command. 

Some packets may be lost in promiscous mode under the condition of a network. 

There is no way to get the ASP Response.  The only key to guess the response is the TID of ATP

To understand the dump line, you may have to have a lot of knowledge of AppleTalk protocol stack. 

SEE ALSO

tcpdump(8)

NEWS-OSRelease 4.2.1R