TCP/IP and Data Communications Administration Guide

To Use snoop to Monitor Network Traffic

  1. Log in to the root account on a Solaris server or BOOTP/DHCP relay agent on the same subnet as the client.

  2. Use the snoop command to trace network traffic. For example:


    snoop -o /tmp/output udp port 67 or udp port 68
    

  3. Boot the client and watch the DHCP message exchange between the client and server(s).

  4. Type:


    snoop -i /tmp/output -x 0 -v
    

You can limit the scope of snoop by specifying the client's hardware address. A version of snoop that understands the DHCP/BOOTP protocols is available in Solaris version 2.5 and later.