5.8

Also, check the mount options for the file system. A common security practice is to mount /usr, /opt,
and /usr/local with notsetuid and nosuid options to prevent setuid binaries from running. Doing
so prevents RunHigh, RunLow, and RunRemote from running.
Monitoring Network Traffic
In rare cases, you might want to monitor TCP/IP traffic for the Agent machine. One way to monitor traffic
is to have X-Windows access to the Agent machine and have the Wireshark/Ethereal package installed
there.
Configure Wireshark/Ethereal to Capture Data
Set up Wireshark/Ethereal to capture network traffic data.
Procedure
1. From the Wireshark/Ethereal tool bar, click Capture > Capture Filters.
2. In the Filter name text box, type csi.
3. In the Filter string text box, type port 26542.
4. Click New.
5. Click Save.
6. Click Close.
Configure Wireshark/Ethereal Coloring Rules
Set up Wireshark/Ethereal to display the start of meaningful messages in colors.
Procedure
1. From the Wireshark/Ethereal tool bar, click View > Coloring Rules.
2. Click New.
3. In the Name text box, type Agent Responses.
4. In the String text box, type data contains HTTP and data contains 200 and data contains OK.
5. Click Foreground color, and select a color (for example, blue).
6. Click OK and click New.
7. In the Name text box, type VCM Pings.
8. In the String text box, type data contains HTTP and data contains ping.
9. Click Foreground color, and select a color (for example, green).
10. Click OK and click New.
11. In the Name text box, type VCM Commands.
12. In the String text box type data contains HTTP and data contains POST and data contains
execute.
13. Click Foreground color, and select a color (for example, red).
14. Click OK.
15. Click Save and click OK.
VCM Troubleshooting Guide
78
VMware, Inc.