netfmt.1m (2011 03)

ManualsBrandsHP ManualsSoftwareHP-UX Manpages

netfmt(1M) netfmt(1M)

NAME

netfmt - format tracing and logging binary ﬁles

SYNOPSIS

/usr/sbin/netfmt -s

[-t records ][[-f

] ﬁle_name ]

/usr/sbin/netfmt -p

[-c conﬁg_ﬁle ]

/usr/sbin/netfmt

[-c conﬁg_ﬁle ][

-F][-t records ][-v][-l][

-n][-x]

[

-N  [-1 [

-L][-T]]] [[-f] ﬁle_name ]

DESCRIPTION

netfmt is used to format binary trace and log data gathered from the network tracing and logging facil-

ity (see nettl (1M)). The binary trace and log information can be read from a ﬁle or from standard input

(if standard input is a tty device, an informative message is given and

netfmt quits). Formatted data is

written to standard output.

Formatting options are speciﬁed in an optional ﬁlter conﬁguration ﬁle. Message inclusion and format can

be controlled by the ﬁlter conﬁguration ﬁle. If no conﬁguration commands are speciﬁed, all messages are

fully formatted.

Global ﬁltering is done by

netfmt

for NetTL’s trace/log packets. A description of the ﬁlter conﬁguration

ﬁle follows the option descriptions.

Options

netfmt recognizes the following command-line options and arguments:

-s Display a summary of the input ﬁle. The summary includes the total number of

messages, the starting and ending timestamps, the types of messages, and informa-

tion about the system that the data was collected on. The contents of the input ﬁle

are not formatted; only a summary is reported.

-t records Speciﬁes the number of records from the tail end of the input ﬁle to format. This

option is helpful, because it allows the user to bypass extraneous information at the

beginning of the ﬁle, and get to the most recent information quickly. The maximum

number of records that can be speciﬁed is 1000. If omitted, all records are format-

ted. The -t option is not allowed when the input ﬁle is a FIFO (pipe).

-f file_name Speciﬁes the input ﬁle containing the binary log or trace data. ﬁle_name may not

be the name of a tty device. Other options may impose additional restrictions on

the type of the input ﬁle allowed. If omitted, data is read from standard input.

-p Parse input: this switch allows the user to perform a syntax check on the conﬁg_ﬁle

speciﬁed by the

-c parameter. All other parameters are ignored. If the syntax is

correct, netfmt terminates with no output or warnings.

-c config_file Speciﬁes the ﬁle containing formatter ﬁlter conﬁguration commands. Syntax for the

commands is given below. When -c is omitted the ﬁle $HOME/.netfmtrc is read

for both logging and tracing ﬁlter conﬁguration commands if it exists.

-F Follow the input ﬁle. Instead of closing the input ﬁle when end of ﬁle is encoun-

tered, netfmt keeps it open and continues to read from it as new data arrives.

This option is especially useful for watching events occur in real time while troub-

leshooting a problem. Another use would be for recording events to a console or

hard-copy device for auditing. (Note that console logging is controlled by the

conﬁguration ﬁles /etc/nettlgen.conf and /var/adm/conslog.opts

; see

nettlgen.conf (4).) The

-F option is not allowed when the input ﬁle is redirected.

The following options are not supported by all subsystems. If a subsystem does not support an option,

that option is ignored during formatting of data from that subsystem. Consult the product documentation

of the subsystem for information regarding the support of these options.

-v Enables output of verbose information. This option displays additional cause and

action text with formatted output. This information describes the possible cause of

the message and any actions that may be required by the subsystem.

After the contents of the input ﬁle have been formatted a summary of the ﬁle is

displayed. When this option is used with the

-t option, only a summary of the last

records is reported. No summary is produced when this option is used in

HP-UX 11i Version 3: March 2011 − 1 − Hewlett-Packard Company 1

Summary of content (10 pages)

PAGE 1
netfmt(1M) netfmt(1M) NAME netfmt - format tracing and logging binary files SYNOPSIS /usr/sbin/netfmt -s [-t records ] [[-f] file_name ] /usr/sbin/netfmt -p [-c config_file ] /usr/sbin/netfmt [-c config_file ] [-F] [-t records ] [-v] [-l] [-n] [-x] [-N  [-1 [-L] [-T]]] [[-f] file_name ] DESCRIPTION netfmt is used to format binary trace and log data gathered from the network tracing and logging facility (see nettl (1M)).
PAGE 2
netfmt(1M) netfmt(1M) conjunction with the -F option or if formatting is interrupted. -l (ell ) Turn off inverse video highlighting of certain traced fields. Use this flag when sending formatted trace data to a line printer. By default, certain fields in the trace file are highlighted in inverse video when viewing the formatted trace format at a terminal that supports highlighting.
PAGE 3
netfmt(1M) netfmt(1M) high Enables output of netfmt internal debugging information to standard error. Same as the -v option. low No internal debugging information is to be displayed. formatter mode value value is one of the following: raw Dumps out the messages in hex format. nice Enables "nice" formatting. Same as -N option. terse Attempts to tersely format each traced packet on a single line. Same as -1 (minus one) option. normal Normal formatting.
PAGE 4
netfmt(1M) netfmt(1M) subsystem. Trace kinds and their corresponding masks are: Name hdrin hdrout pduin pduout proc hdrin hdrout pduin pduout proc state error logging loopback Mask 0x80000000 0x40000000 0x20000000 0x10000000 0x08000000 Name state error logging loopback Mask 0x04000000 0x02000000 0x01000000 0x00800000 Inbound Protocol Header. Outbound Protocol Header. Inbound Protocol Data Unit (including header and data). Outbound Protocol Data Unit (including header and data).
PAGE 5
netfmt(1M) netfmt(1M) Subsystem Filtering Note : Global filtering described above takes precedence over individual subsystem tracing and logging filtering described below. Subsystem filters are provided to allow filtering of data for individual subsystems or groups of subsystems. Their behavior varies among individual subsystems. Subsystem filters are valid only when the corresponding subsystems have been installed and configured on the system.
PAGE 6
netfmt(1M) netfmt(1M) local_addr :port remote_addr :port where local_addr and remote_addr can be a hostname or a 4-byte Internet address specified in decimal dot notation (see inet (3N) for more information on Internet addresses and decimal dot notations). port can be a service name or an integer . integer represents a port and can be designated by a hexadecimal integer (0xdigits), an octal integer (0digits), or base-10 integers (0 through 65535).
PAGE 7
netfmt(1M) netfmt(1M) filter subsystem value value takes the form: subsys_name event event_list where subsys_name is a subsystem name obtained using the nettlconf-status command or one of the following abbreviations: axin ip nsdiag rlbdaemon timod bufs ipc nse sockregd tirdwr caselib lan probe strlog udp caserouter loopback pxp tcp nfs event_list takes the form: event_spec [,event_spec ...
PAGE 8
netfmt(1M) netfmt(1M) DEPENDENCIES netfmt only recognizes subsystems and filters from products which have been installed and configured. WARNINGS The syntax that was used for the obsolete LAN trace and log options has been mixed with the syntax for the netfmt command such that any old options files can be used without any changes. The combination of syntax introduces some redundancy and possible confusion.
PAGE 9
netfmt(1M) netfmt(1M) filter 6. connection subsystem event * subsystem subsystem ip tcp event event 5003 *,!3000 Format only events 5003, 5004, 5005, and 5006 for subsystem ip. Format all events except events 3000, 3002, and 3003 for subsystem tcp. No other events are formatted: filter filter 9. ip Format only event 5003 for subsystem ip. Format all events except 3000 for subsystem tcp. No other events are formatted. filter filter 8. 192.6.1.3:1198 Format all logged events for subsystem ip.
PAGE 10
(Notes) A (Notes) nA 10 Hewlett-Packard Company −1− HP-UX 11i Version 3: March 2011