Securing the Network in Oracle^® Solaris 11.3

How to Save Logged Packets to a File

You can save packets to a file during troubleshooting, or when you want to audit the traffic manually.

Before You Begin

You must assume the root role.

• Save the logged packets to a file.

  # cat /dev/ipl > filename

  Continue logging packets to the filename file until you interrupt the procedure by typing Control-C to get the command line prompt back.

Example 27  Saving Logged Packets to a File

The following example shows the result when logged packets are saved to a file.

# cat /dev/ipl > /tmp/logfile
^C#

# ipmon -f /tmp/logfile
02/09/2012 15:30:28.708294 net0 @0:1 p 192.0.2.7,33923 -> 
  192.0.2.8,23 PR tcp len 20 52 -S IN
02/09/2012 15:30:28.708708 net0 @0:1 p 192.0.2.7,33923 -> 
  192.0.2.8,23 PR tcp len 20 40 -A IN
02/09/2012 15:30:28.792611 net0 @0:1 p 192.0.2.7,33923 -> 
  192.0.2.8,23 PR tcp len 20 70 -AP IN
02/09/2012 15:30:28.872000 net0 @0:1 p 192.0.2.7,33923 -> 
 192.0.2.8,23 PR tcp len 20 40 -A IN
02/09/2012 15:30:28.872142 net0 @0:1 p 192.0.2.7,33923 -> 
  192.0.2.8,23 PR tcp len 20 43 -AP IN
02/09/2012 15:30:28.872808 net0 @0:1 p 192.0.2.7,33923 -> 
  192.0.2.8,23 PR tcp len 20 40 -A IN
02/09/2012 15:30:28.872951 net0 @0:1 p 192.0.2.7,33923 -> 
  192.0.2.8,23 PR tcp len 20 47 -AP IN
02/09/2012 15:30:28.926792 net0 @0:1 p 192.0.2.7,33923 -> 
  192.0.2.8,23 PR tcp len 20 40 -A IN 
.
.
(output truncated)