UNIX admin writes: > The question is, using snoop(1M), how can I find out what the 220R is > attempting to mount? What should I be looking for? (I can see the DHCP > exchange going on, this seems to go as expected.)
I'd capture everything, and then inspect it either with snoop or (better yet) wireshark. > snoop -V gives me too little data to conclude what is happening, snoop -v > gives me too much. > > What type of traffic should I be snooping? What should the snoop filter look > like? I'd look at TFTP first. I suspect trouble in getting the boot archive. > Is there a way to snoop only NFS attempts? Sure; it's in the examples section of the man page. "rpc nfs" will show only NFS traffic. -- James Carlson, Solaris Networking <james.d.carlson at sun.com> Sun Microsystems / 35 Network Drive 71.232W Vox +1 781 442 2084 MS UBUR02-212 / Burlington MA 01803-2757 42.496N Fax +1 781 442 1677