Joseph Freemaker
2007-Aug-30 17:18 UTC
[dtrace-discuss] Capture of loopback interface messages
Hi,
I am new to DTrace.
Want to capture (for specific port #s) the loopback interface (lo0) tcp message
flow with the complete message body.
Is this possible with DTrace?
Are any examples available?
Thanks,
Joe
____________________________________________________________________________________
Looking for a deal? Find great prices on flights and hotels with Yahoo!
FareChase.
http://farechase.yahoo.com/
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
<http://mail.opensolaris.org/pipermail/dtrace-discuss/attachments/20070830/b38e02c9/attachment.html>
Dan McDonald
2007-Aug-30 17:29 UTC
[dtrace-discuss] Capture of loopback interface messages
On Thu, Aug 30, 2007 at 10:18:22AM -0700, Joseph Freemaker wrote:> Want to capture (for specific port #s) the loopback interface (lo0) tcp message flow with the complete message body. > > Is this possible with DTrace?No. Your best bet in this regard is Project Clearview, which will, among many other things, allow the snooping of loopback. Check out their page here: http://www.opensolaris.org/os/project/clearview/ Dan
Rajagopal Kunhappan
2007-Aug-30 17:42 UTC
[dtrace-discuss] Capture of loopback interface messages
A quick check on google reveals a loopback dtrace script. Check and see if it still works. http://forum.java.sun.com/thread.jspa?threadID=5075493&messageID=9366651 Otherwise use the Clearview bits if it is possible. -krgopi Dan McDonald wrote:> On Thu, Aug 30, 2007 at 10:18:22AM -0700, Joseph Freemaker wrote: > >> Want to capture (for specific port #s) the loopback interface (lo0) tcp message flow with the complete message body. >> >> Is this possible with DTrace? >> > > No. > > Your best bet in this regard is Project Clearview, which will, among many > other things, allow the snooping of loopback. Check out their page here: > > http://www.opensolaris.org/os/project/clearview/ > > Dan > > _______________________________________________ > dtrace-discuss mailing list > dtrace-discuss at opensolaris.org >
Pierre-Olivier Gaillard
2007-Aug-30 18:13 UTC
[dtrace-discuss] Capture of loopback interface messages
That''s a coincidence. This morning I tried to do "snoop -d lo0" and it wouldn''t work. Is it really impossible to just snoop on loopback as you would on Linux with wireshark or tcpdump ? Anyway, thanks for the dtrace pointer. On 8/30/07, Rajagopal Kunhappan <rajagopal.kunhappan at sun.com> wrote:> > A quick check on google reveals a loopback dtrace script. Check and see > if it still works. > http://forum.java.sun.com/thread.jspa?threadID=5075493&messageID=9366651 > > Otherwise use the Clearview bits if it is possible. > > -krgopi > > Dan McDonald wrote: > > On Thu, Aug 30, 2007 at 10:18:22AM -0700, Joseph Freemaker wrote: > > > >> Want to capture (for specific port #s) the loopback interface (lo0) tcp > message flow with the complete message body. > >> > >> Is this possible with DTrace? > >> > > > > No. > > > > Your best bet in this regard is Project Clearview, which will, among > many > > other things, allow the snooping of loopback. Check out their page > here: > > > > http://www.opensolaris.org/os/project/clearview/ > > > > Dan > > > > _______________________________________________ > > dtrace-discuss mailing list > > dtrace-discuss at opensolaris.org > > > _______________________________________________ > dtrace-discuss mailing list > dtrace-discuss at opensolaris.org >-------------- next part -------------- An HTML attachment was scrubbed... URL: <http://mail.opensolaris.org/pipermail/dtrace-discuss/attachments/20070830/28ebe5ad/attachment.html>
James Carlson
2007-Aug-30 18:22 UTC
[dtrace-discuss] Capture of loopback interface messages
Pierre-Olivier Gaillard writes:> That''s a coincidence. This morning I tried to do "snoop -d lo0" and it > wouldn''t work. > > Is it really impossible to just snoop on loopback as you would on Linux with > wireshark or tcpdump ?Yes. That''s why this feature is being added by the Clearview project. -- James Carlson, Solaris Networking <james.d.carlson at sun.com> Sun Microsystems / 1 Network Drive 71.232W Vox +1 781 442 2084 MS UBUR02-212 / Burlington MA 01803-2757 42.496N Fax +1 781 442 1677
Sanjeev Bagewadi
2007-Aug-31 04:09 UTC
[dtrace-discuss] Capture of loopback interface messages
Dan, I was helping a student write this simple Dscript to track traffic between zones on a single host. It should work in your case as well I guess. You may need to tweak it a bit. Regards, Sanjeev. Rajagopal Kunhappan wrote:> A quick check on google reveals a loopback dtrace script. Check and see > if it still works. > http://forum.java.sun.com/thread.jspa?threadID=5075493&messageID=9366651 > > Otherwise use the Clearview bits if it is possible. > > -krgopi > > Dan McDonald wrote: > >> On Thu, Aug 30, 2007 at 10:18:22AM -0700, Joseph Freemaker wrote: >> >> >>> Want to capture (for specific port #s) the loopback interface (lo0) tcp message flow with the complete message body. >>> >>> Is this possible with DTrace? >>> >>> >> No. >> >> Your best bet in this regard is Project Clearview, which will, among many >> other things, allow the snooping of loopback. Check out their page here: >> >> http://www.opensolaris.org/os/project/clearview/ >> >> Dan >> >> _______________________________________________ >> dtrace-discuss mailing list >> dtrace-discuss at opensolaris.org >> >> > _______________________________________________ > dtrace-discuss mailing list > dtrace-discuss at opensolaris.org >-- Solaris Revenue Products Engineering, India Engineering Center, Sun Microsystems India Pvt Ltd. Tel: x27521 +91 80 669 27521 -------------- next part -------------- A non-text attachment was scrubbed... Name: ip-tcp-udp-icmp.d Type: text/x-dsrc Size: 2330 bytes Desc: not available URL: <http://mail.opensolaris.org/pipermail/dtrace-discuss/attachments/20070831/2fd400a7/attachment.bin>
Brendan Gregg - Sun Microsystems
2007-Sep-06 00:25 UTC
[dtrace-discuss] Capture of loopback interface messages
On Thu, Aug 30, 2007 at 01:29:40PM -0400, Dan McDonald wrote:> On Thu, Aug 30, 2007 at 10:18:22AM -0700, Joseph Freemaker wrote: > > Want to capture (for specific port #s) the loopback interface (lo0) tcp message flow with the complete message body. > > > > Is this possible with DTrace? > > No.This is possible with DTrace - it is just hard to do (which I''m sure Dan knows). The DTrace Network provider project will make it much easier (once it is integrated), the prototype of which was tracing loopback traffic almost a year ago.> Your best bet in this regard is Project Clearview, which will, among many > other things, allow the snooping of loopback. Check out their page here: > > http://www.opensolaris.org/os/project/clearview/Yes, this probably is your best bet if you want to type, snoop -o out port # and then process the file afterwards (which is handy to do). Brendan -- Brendan [CA, USA]