NAME

atmsnoop − capture and inspect ATM network packets

SYNOPSIS

/opt/SUNWatm/bin/atmsnoop [ −aPDSvVNC ] [ −d device ] [ −s snaplen ]

[ −c maxcount ] [ −i filename ] [ −o filename ]

[ −n filename ] [ −t [ r | a | d ] ] [ −p first [  , last ] ]

[ −I vc [ , vc ] [ - vc ] ] [ −X vc [ , vc ] [ - vc ] ]

[ −x offset [ , length ] ] [ expression ]

AVAILABILITY

SUNWatmu

DESCRIPTION

atmsnoop captures packets from an ATM interface and displays their contents. The options and functionality are the same as the generic snoop command, with a few ATM-specific additions. The options that are different from those described in the snoop(1M) man page are described here. For a full description of the basic options, see the snoop(1M) man page. 

OPTIONS

-d device Receive packets from the network using the interface specified by device. If no device is specified using the -d flag, atmsnoop will use sa0 by default. 

-I vc[,vc][-vc] Only display frames from the specified VC(s). A single VC, a list of VCs (vc,vc,vc), or a range of VCs (vc-vc) may be specified.  Note that -I 5 directly contradicts the expression nosig; if both of these options appear in the command line, an error will be printed and atmsnoop exits.  The same is true for the combination of -I 16 and the expression noilmi.  However, the combination of -I 5 and the expression noqsaal is allowed; this will result in the printing of VC 5 signaling messages only. 

-X vc[,vc][-vc] Do not display frames from the specified VC(s). A single VC, a list of VCs (vc,vc,vc), or a range of VCs (vc-vc) may be specified. 

expression Select packets either from the network or from a capture file.  Only packets for which the expression is true will be selected.  If no expression is provided it is assumed to be true.  atmsnoop supports the boolean primitives and operators that are discussed in the snoop(1M) man page. In addition, it supports some atm-specific primitives that may also be used in filter expressions. They are:

nosig
When used as an argument to atmsnoop, nosig filters out of the output all packets sent or received on the signalling VC, VC 5, which is used for signalling and QSAAL packets.

noqsaal
QSAAL packets are a subset of those seen on the signalling VC. When noqsaal is used as an argument to atmsnoop, it filters out only the QSAAL packets.

noilmi
ILMI packets (all VC 16 traffic) will be filtered out if noilmi appears as an argument to atmsnoop.

nollc
The LLC protocol is used to encapsulate IP packets into ATM; if the primitive nollc appears as an argument to atmsnoop, all LLC packets will be filtered out of the output. LAN Emulation data frames will be filtered, since they are LLC encapsulated.

nolane
All LAN Emulation frames are filtered out. This includes both LAN Emulation control frames and data sent over LAN Emulation connections.

EXAMPLES

Capture all non-ILMI packets and display them as they are received:

muskogee# atmsnoop noilmi
Using device sa0 (promiscuous mode)
TX: VC=5
QSAAL: PDU_BGN N(MR)=40 N(UU)=0
________________________________________________________
TX: VC=5
QSAAL: PDU_BGN N(MR)=40 N(UU)=0
________________________________________________________
TX: VC=5
QSAAL: PDU_BGN N(MR)=40 N(UU)=0
________________________________________________________
^Cmuskogee#

Capture all non-QSAAL packets and save them to a file:

muskogee# atmsnoop -o save noqsaal
Using device sa0 (promiscuous mode)
^Cmuskogee#

Capture all packets and show the verbose summary output:

muskogee# atmsnoop -V

Using device sa0 (promiscuous mode)
TX: VC=5
QSAAL: PDU_POLL N(S)=7 N(PS)=271
________________________________________________________
RX: VC=5
QSAAL: PDU_STAT N(R)=7 N(MR)=22 N(PS)=271
________________________________________________________
RX: VC=1005
LLC Type=0x0800 (IP), size = 160 bytes
IP  D=192.1.1.5 S=192.1.1.8 LEN=148, ID=23478
UDP D=2049 S=836 LEN=128
RPC C XID=797246949 PROG=100003 (NFS) VERS=2 PROC=4
NFS C LOOKUP FH=B609 dir_entry055
________________________________________________________
RX: VC=5
QSAAL: PDU_POLL N(S)=7 N(PS)=270
________________________________________________________
TX: VC=5
QSAAL: PDU_STAT N(R)=7 N(MR)=47 N(PS)=270
________________________________________________________
RX: VC=1007
LLC Type=0x0800 (IP), size = 152 bytes
IP  D=192.1.1.5 S=192.1.1.12 LEN=140, ID=51245
UDP D=2049 S=946 LEN=120
RPC C XID=797034130 PROG=100003 (NFS) VERS=2 PROC=6
NFS C READ FH=79DA at 0 for 8192
________________________________________________________
^Cmuskogee#

SEE ALSO

snoop(1M), ilmid(1M), q93b(7)

SunOS 2.0  —  Last change: 7 Dec 1994