RE: Sniff TCP/IP traffic on iSeries?

The trick is whether you are on a switch or a hub. A hub sends all
traffic out all ports, so if you turn on a sniffing program like
ethereal you will be able to see all of the traffic that is going by. If
you are on a switch, it has more intelligence then a hub, and will only
send you your traffic, and broadcasts. If you switch is a Cisco switch
there is a command "port monitor" which will echo the traffic on one
port to another port. For example lets say that I was plugged into port
fast Ethernet port 14, and the AS400 was plugged into port 18, I would
run the following command.

wasw0538#config t
Enter configuration commands, one per line.  End with CNTL/Z.
wasw0538(config)#int fa0/14
wasw0538(config-if)#port monitor fa0/18
wasw0538(config-if)#^Z

Chris

-----Original Message-----
From: midrange-l-bounces@xxxxxxxxxxxx
[mailto:midrange-l-bounces@xxxxxxxxxxxx] On Behalf Of
michael@xxxxxxxxxxxxxxxxxx
Sent: Tuesday, October 25, 2005 6:00 AM
To: Midrange Systems Technical Discussion
Subject: RE: Sniff TCP/IP traffic on iSeries?

I dunno...I've used Ethereal to trace traffic from/to an iSeries and PC.
I just gave it a try, and only saw my traffic between the iSeries and my
PC, not other iSeries traffic.

> -------- Original Message --------
> Subject: RE: Sniff TCP/IP traffic on iSeries?
> From: Vernon Hamberg <vhamberg@xxxxxxxxxxx>
> Date: Mon, October 24, 2005 11:51 pm
> To: Midrange Systems Technical Discussion <midrange-l@xxxxxxxxxxxx>
> 
> I really like ethereal, too, but are you able to use it from the PC 
> to see the traffic on the iSeries network card? Using promiscuous or 
> whatever they call that?
> 
> At 09:16 AM 10/24/2005, you wrote:
> 
> >You can do a communications trace (STRCMNTRC) or Trace Connection
> >(TRCCNN) or Trace TCP/IP Application (TRCTCPAPP) if it's a specific
> >app. I also use Etheral to trace the line.
> >
> > > -------- Original Message --------
> > > Subject: Sniff TCP/IP traffic on iSeries?
> > > From: David Gibbs <david@xxxxxxxxxxxx>
> > > Date: Mon, October 24, 2005 10:07 am
> > > To: midrange-l@xxxxxxxxxxxx
> > >
> > > Folks:
> > >
> > > Does anyone know if / how you can sniff tcp/ip traffic on the
iSeries?
> > >
> > > I've got a situation where we seem to be loosing the connection to
a
> > > remote system after we send data (and the remote system sends the
data
> > > back).  When we try to read socket, we're getting a "A connection
with a
> > > remote socket was reset by that socket" error.
> > >
> > > We've sniffed the ethernet traffic on the remote system ... and we
can
> > > see the data sent from the iSeries being received, and a response
is
> > > sent back ... but the iSeries never receives it.
> > >
> > > Thanks!
> > >
> > > david
> > > --
> > > This is the Midrange Systems Technical Discussion (MIDRANGE-L)
mailing list
> > > To post a message email: MIDRANGE-L@xxxxxxxxxxxx
> > > To subscribe, unsubscribe, or change list options,
> > > visit: http://lists.midrange.com/mailman/listinfo/midrange-l
> > > or email: MIDRANGE-L-request@xxxxxxxxxxxx
> > > Before posting, please take a moment to review the archives
> > > at http://archive.midrange.com/midrange-l.
> >
> >--
> >This is the Midrange Systems Technical Discussion (MIDRANGE-L)
mailing list
> >To post a message email: MIDRANGE-L@xxxxxxxxxxxx
> >To subscribe, unsubscribe, or change list options,
> >visit: http://lists.midrange.com/mailman/listinfo/midrange-l
> >or email: MIDRANGE-L-request@xxxxxxxxxxxx
> >Before posting, please take a moment to review the archives
> >at http://archive.midrange.com/midrange-l.
> 
> -- 
> This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing
list
> To post a message email: MIDRANGE-L@xxxxxxxxxxxx
> To subscribe, unsubscribe, or change list options,
> visit: http://lists.midrange.com/mailman/listinfo/midrange-l
> or email: MIDRANGE-L-request@xxxxxxxxxxxx
> Before posting, please take a moment to review the archives
> at http://archive.midrange.com/midrange-l.