snoop and NFS

Well here is a thing I never knew until today. If you want to snoop all the NFS traffic between two hosts then don't use the rpc option. Ie don't do this:

snoop rpc nfs

As this will only collect you the packets that contain the RPC headers in them not all the other packets with the ACK's and the packets that contain the majority of the data. For NFS use


snoop port nfsd

which will get you everything on the nfs port including all those extra packets you really really want to see.


Tags:

Comments:

Hey Chris, Enjoyed reading the planet cycling site and thought I'd drop in and say hi.

Posted by Jill on January 06, 2006 at 03:04 PM GMT #

A real journalist reading this. Can I add your blog to the planet?

Posted by Chris Gerhard on January 07, 2006 at 05:37 AM GMT #

That would be why my snoop script didnt capture the output that was really needed :) Lucky someone knows what they are doing :D

Posted by Jonathan Cowper-Andrewes on January 10, 2006 at 02:25 AM GMT #

Post a Comment:
Comments are closed for this entry.
About

This is the old blog of Chris Gerhard. It has mostly moved to http://chrisgerhard.wordpress.com

Search

Archives
« April 2014
MonTueWedThuFriSatSun
 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
    
       
Today