UNIX admin writes:
> The question is, using snoop(1M), how can I find out what the 220R is 
> attempting to mount?  What should I be looking for? (I can see the DHCP 
> exchange going on, this seems to go as expected.)

I'd capture everything, and then inspect it either with snoop or
(better yet) wireshark.

> snoop -V gives me too little data to conclude what is happening, snoop -v 
> gives me too much.
> 
> What type of traffic should I be snooping? What should the snoop filter look 
> like?

I'd look at TFTP first.  I suspect trouble in getting the boot
archive.

> Is there a way to snoop only NFS attempts?

Sure; it's in the examples section of the man page.  "rpc nfs" will
show only NFS traffic.

-- 
James Carlson, Solaris Networking              <james.d.carlson at sun.com>
Sun Microsystems / 35 Network Drive        71.232W   Vox +1 781 442 2084
MS UBUR02-212 / Burlington MA 01803-2757   42.496N   Fax +1 781 442 1677

Reply via email to