% VAX-11 Librarian V04-00֚ſ@ſU"V5@fileADD ^addressrCLEARDISPLAY" Ethernet_portzEXIT HELPLOADMAPTMONITORrPING#VSAVE$SET34SHOWDxSPAWNE SUMMARIZEHTRACERWAITNޚſ1 @fileA Executes an indirect command file containing ETHERMON commands.+ Indirect command files may not be nested. The command format is @filenamewwNޚſ1 ADD> Adds new items to the ETHERMON utility's internal databases. The command format is+ ADD item-name [additional parameters]+ where the item-names are specified below.2 FILTERD Adds a new entry to the message filter database. The filter can beF initia lly enabled or disabled, and can specify protocol type, sourceG address, destination address, or a combination thereof for filtering. The command format is+ ADD FILTER /qualifier [/qualifier...]3 Command_Qualifiers/DISABLEB Specifies that the filter should initially be disabled; it may beA enabled later with the SET FILTER command. The default for a new filter definition is enabled./ENABLEA Specifies that the filter should initially be enabled; it may beA enabled lat er with the SET FILTER command. The default for a new filter definition is enabled.$/EXCLUDE=(field=value[,field=value])B Specifies that messages that match the specified fields should beB filtered out and not used in the analysis. The fields that can be used are: ADDRESS=address! ADDRESS=manufacturer-prefix DESTINATION=address% DESTINATION=manufacturer-prefix6 MULTICAST (all destinations that are multicast)E PROTOCOL=aa-bb (where aa-bb is the hex adecimal protocol type) SOURCE=address SOURCE=manufacturer-prefix!/ONLY=(field=value[,field=value])@ Specifies that messages that do not match the specified fields @ should be filtered out and not used in the analysis. The fields that can be used are: ADDRESS=address! ADDRESS=manufacturer-prefix DESTINATION=address% DESTINATION=manufacturer-prefix6 MULTICAST (all destinations that are multicast)E PROTOCOL=aa-bb (where aa-bb is the hex adecimal protocol type) SOURCE=address SOURCE=manufacturer-prefixww@ߚſ 1 address2 assignment_conventionsH The conventions for Ethernet addresses are that the least significant G bit of the first byte is clear for a physical address, and set for a ? multicast address. The first three bytes describe a block of F addresses allocated to a particular manufacturer, and the remaining F bytes make up an individual ID code for a single node. A short, veryC incomplete list of known physical address ranges are (longer list5 available with the SHOW MANUFACTURERS/ALL command):D Digital Equipment Corp.: AA-00-03-00-xx-yy (hardware default forG DEUNA network adapters)I AA-00-04-00-xx-yy (DECnet logical addresses)J 08-00-2B-xx-yy-zz (initial hardware addressesK for LANCE-based interfaces,G  used for DECservers and; DECbridges)E Sun Microsystems: 08-00-20-02-xx-yy (hardware default for G 386i workstations; lastG 2 bytes +1 are host ID)D 08-00-20-00-xx-yy (hardware default forL Ethernet interfaces on otherA  Sun workstations)K Xyplex Corp.: 08-00-87-00-xx-yy (Ethernet CC's, HIU's, etc.;F yyxx is unit serial #)J Ungermann-Bass: 00-DD-00-xx-yy-zz (old-style NET-ONE terminalD network controllers,J where xxyy is box #, zz is8 board #)K  00-DD-01-xx-yy-zz (new terminal network boxes,G xxyyzz is 24-bit box #)K 00-DD-0F-xx-yy-zz (Token Ring terminal networkG boxes, xxyyzz is box #)K CMC: 02-CF-1F-04-xx-yy (UNIBUS Ethernet interfaces)K 02-CF-1F-09-xx-yy (UNIBUS Ethernet interfaces)D 02-CF-1F-70-xx-yy (MULTIBUS II Et hernet; interfaces) 2 formats@ Addresses on the Ethernet can be specified to ETHERMON in fourG different formats. The standard Xerox physical address display formatC is the one always used by ETHERMON on output, and may be used forC input wherever an Ethernet address is required. It is of the formF aa-bb-cc-dd-ee-ff, where each pair of letters is a one- or two-digit? hexadecimal number, and the numbers are separated by hyphens.6 Al ternately, Ethernet addresses can be specified as:J a) DECnet node number, i.e. area.node, where area is a decimal numberF in the range 1 to 63 and node is a decimal number in the range 1 to 1023;E b) Internet physical address, i.e. a.b.c.d, where each letter isE a decimal number in the range 0 to 255, and the total address9 must correspond to an entry in the address table;F c) DECnet node name, i.e. a 1- to 6-character alphanumeric stringE (starting with a letter) which must match the DECnet name of & an entry in the address table.ww[ſ1 CLEAR? Removes item definitions from the ETHERMON utility's internal databases. The command format is- CLEAR item-name [additional parameters]+ where the item-names are specified below.2 FILTERF Removes entries from the Ethernet message filter database, or clears the entire filter list (/ALL).E If only a single filter is to be removed, the number of the desired filter must be specified. The command format is CLEAR FILTER filter-number or CLEAR FILTER/ALL2 FLAGSH Clears the Internet (IP) flag bits for all address table entries. ThisG is primarily available to allow re-deriving of IP addresses for nodesG when some of the addresses are garbled (generally due to glitchy RIP H type IP routing messages detected on the Ethernet). After entering theG command, automatic IP address derivation will start over from scratchF (although the address table entries themselves will not be deleted). The command format is CLEAR FLAGSwwſ 1 DISPLAYE Generates a dynamically updating status display, similar to the VMSD MONITOR utility. The display updates continuously at the specifiedF update interval (see SET INTERVAL for more details) until any key isG struck on the user terminal; at this time, the display will terminate1 and control will return to the ETHERMON prompt. The command format is& DISPLAY displaytype [/qualifier]8 where displaytype is one of the types specified below.2 DESTINATIONSF Displays the top (up to 15) destination addresses being specified inI the Ethernet traffic. For addresses with known meanings, their symbolic names will also be displayed. 2 PROTOCOLSB Displays the top (up to 8) protocol types being specified in theB Ethernet traffic. For protocol types with known functions, their( symbolic names will also be displayed.2 SIZESE Displays the size distribution of messages being transferred on theD Ethernet for message size groupings from 1-100 to 1401-1500 bytes. 2 SOURCESF Displays the top (up to 15) source addresses being specified in the E Ethernet traffic. For addresses with known meanings, their symbolic names will also be displayed. 2 STATISTICS@ Displays the current counter statistics from the Ethernet port9 (averages, minimums, and maximums not yet implemented).2 Command_qualifiers /NOFILTERD Specifies that the DISPLAY command will display all messages beingF processed by ETHERMON, ignoring any filter settings. By default, theA DISPLAY command only displays data that has passed the filters.ww`vſ1 Ethernet_portF When the ETHERMON program is started, it must be informed as to whatF VAX/VMS device it will use as its interface to the Ethernet. Any DECE standard Ethernet port (DEUNA, DEQNA, DEBNT, etc.) may be specified@ by its VMS device name (XEA0:, ESA0:, etc.) as a command line D parameter at DCL level; if the name is not specified (or ETHERMON G is not invoked as a foreign command), ETHERMON will search the systemH for all standard known ports. If only one port is found, ETHERMON willG use it, else it will display a list of known available ports for the G user to choose from, and prompt for the device name. The unit number 2 is not required, as it will be discarded anyway.G Note that the user must have PHY_IO and NETMBX (or SETPRV) privileges to run this utility.ww`vſ1 EXITD Terminates the ETHERMON utility and returns control to the command; interpreter. Control-Z may also be used for this purpose.ww`vſ1 HELPB The ETHERMON utility provides the ability to dynamically monitorD the state of an Ethernet network connected to a VAX system. It canE generate dynamic displays of the current state of the cable, or can> record events occurring on the cable for analysis by another program.+ For more information on any command, type- HELP command [/qualifiers] [parameters] at the ETHERMON prompt.ww`vſ1 LOADG Loads files of equivalence name definitions into the address, filter, or protocol name tables. The command format is:& LOAD [/tabletype] [loadfilespec]2 loadfilespecC The name of the data file to be loaded into the ETHERMON run-t imeC database. If the file specification is missing or incomplete, theK specification SYS$DISK:[]ETHERMON.ETH_tabletype is used to supply missingG components. The format of the files is that used by the SAVE command. 2 tabletypes /ADDRESSESD Specifies that the file should be merged into the addresses table;4 this is the default if no table type is specified./FILTERSB Specifies that the file should be appended to the filters table;C note that all filters loaded from a file are  initially disabled, = and must be enabled with the SET FILTER command to be used. /INTERNETD Specifies that any Internet addresses in the address table that doE not have symbolic names should be looked up from the local InternetE software. Currently, TGV Multinet, DEC VMS/Ultrix Connection (UCX),C and Carnegie-Mellon University TCP/IP (CMU TCP/IP) are supported C Internet software packages. Note that this command's results are C no better than the contents of the Internet software's host tableD and/or domain name servers. A file specification is not used with  this qualifier. /PROTOCOLSD Specifies that the file should be merged into the protocols table.wwſ1 MAPD Computes a map of Ethernet bridge interconnections for all bridgesG presently listed in the bridge table (use SHOW BRIDGES to examine the table). The command format is MAP 2 OperationJ Each bridge is queried for its forwarding table, which is then analyzed K to find which side of the bridge each of the other bridges is located on.K For purposes of analysis, the Ethernet port that ETHERMON is being run on# is treated as a one-sided bridge.2 Supported_bridges& Presently, the bridges supported are6 - any bridge speaking DEC's LAN Bridge protocolwwſ 1 MONITORE Generates a dynamically updating status display, similar to the VMSD MONITOR utility. The display updates continuously at the specified F update interval (see SET INTERVAL for more details) until any key isG struck on the user terminal; at this time, the display will terminate1 and control will return to the ETHERMON prompt. The command format is MONITOR displaytypeE This command is a synonym for the DISPLAY command; use HELP DISPLAY for more information.wwſ1 PINGB Attempts to "ping" a message off a remote node on the Ethernet, F similar to the Un*x "ping" utility, and repo!rts the turnaround time  if successful. The command format is:! PING [/qualifier] [address]G Note that, on a busy Ethernet, the PING command may fail because the B reply packet was discarded because ETHERMON couldn't keep up in  order to read it. 2 address, The address of the remote node, as one of:3 a physical Ethernet address aa-bb-cc-dd-ee-ff% a physical DECnet address (a.b)# a recognized DECnet node name. a physical Internet IP a"ddress (a.b.c.d)J If an address is not supplied, the Broadcast address (FF-FF-FF-FF-FF-FF)G is assumed; this is the only permitted multicast address for the PING command. 2 qualifiers/IEEE_LOOPBACK (D)D Specifies that the "ping" message should be sent using IEEE 802.3 @ SNAP protocols for the general loopback protocol type (90-00). /IEEE_MOPD Specifies that the "ping" message should be sent using IEEE 802.3 C SNAP protocols using the DEC MOP Remote Console protocol (60-02) #9 type's Request ID and System ID response message types. /INTERNETF Specifies that the "ping" message should be sent using DoD Internet B IP (08-00) datagrams using the ICMP Echo Request and Echo Reply  message formats. /LOOPBACKA Specifies that the "ping" message should be sent using Ethernet; protocols for the general loopback protocol type (90-00)./MOPB Specifies that the "ping" message should be sent using Ethernet > protocols using the DEC MOP Remote Console proto$col (60-02) 9 type's Request ID and System ID response message types.ww@ ſ1 SAVEG Saves files of equivalence name definitions from the address, filter, or protocol name tables. The command format is:& SAVE [/tabletype] [savefilespec]2 savefilespecD The name of the data file to be written from the ETHERMON run-timeC database. If the file specification is missing or incomplete, theB specification SYS$DISK:[]tabletype.ETH is used to supply missingC% components. The output files are ASCII data, in a format suitableF for use by the LOAD command; the files may be edited, but the format? should remain the same to ensure that the LOAD command works. 2 tabletypes /ADDRESSESA Specifies that the addresses table should be saved; this is the( default if no table type is specified./FILTERS3 Specifies that the filters table should be saved. /PROTOCOLS5 Specifies that the protocols table should be saved.ww@ ſ&1 SET@ Modifies the attributes of internal data items in the ETHERMON utility. The command format is SET item-name value or SET item-name /qualifier+ where the item-names are specified below.2 ADDRESS_NAMEE Adds new entries or modifies existing ones in the Ethernet address/E node name table. An Ethernet address (physical or multicast) may beG entered with an arbitrary text string (if the string contains blanks,C lowercase letters, or punctuat 'ion marks, it should be enclosed inG double quotes {"}). Note that, when enabled, additional address namesE may be entered automatically as ETHERMON analyzes received Internet8 ARP messages and similar node identification messages. The command format is5 SET ADDRESS_NAME physical_etheraddr name_symbol or9 SET ADDRESS_NAME physical_etheraddr "quoted string"3 physical_etheraddrF A standard 48-bit Ethernet address in Xerox standard display format,B i.e., (of six 1- or 2-digit hexadecimal numbers, low byte first, F with the bytes separated by hyphens. For example: 12-34-56-87-AB-DD. 3 name_symbolC A name of up to 23 characters, containing only letters, numbers, > dollar sign ($), and/or underscore (_). For example: VAX_10.3 quoted_stringD A string of text, begun and ended with double quote marks ("); theD quote marks are not included in the string itself, and quote marksE may not be used as part of the string. Only the first 23 cha)ractersJ specified will actually be stored. For example: "My MicroVAX on TCP/IP".2 FILTERH Modifies an existing entry in the message filter database. The filter F can be enabled or disabled, and can change the protocol type, sourceG address, destination address, or a combination thereof for filtering. The command format is5 SET FILTER filter_num/qualifier [/qualifier...] or2 SET FILTER/SIZE=(sizeoption[,sizeoption...]) 3 filter_numG The identification* number the filter was assigned when it was created with the ADD FILTER command.3 Command_Qualifiers/DISABLEA Specifies that the filter should be disabled; it may be enabled @ later with the SET FILTER/ENABLE command. The default for a new filter definition is enabled./ENABLE@ Specifies that the filter should be enabled; it may be disabledA later with the SET FILTER/DISABLE command. The default for a new filter definition is enabled.$/EXCLUDE=(field=value[,field=value])B S +pecifies that messages that match the specified fields should beB filtered out and not used in the analysis. Any existing EXCLUDE'sB that are not specified here will not be changed. The fields that  can be used are: ADDRESS=address! ADDRESS=manufacturer-prefix DESTINATION=address% DESTINATION=manufacturer-prefix6 MULTICAST (all destinations that are multicast)E PROTOCOL=aa-bb (where aa-bb is the hexadecimal protocol type) SOURCE=address ,SOURCE=manufacturer-prefix/NODESTINATIOND Clears any previously defined destination address filtering for the3 filter (whether it was EXCLUDE or ONLY filtering). /NOPROTOCOL> Clears any previously defined protocol type filtering for the3 filter (whether it was EXCLUDE or ONLY filtering). /NOSOURCE? Clears any previously defined source address filtering for the3 filter (whether it was EXCLUDE or ONLY filtering).!/ONLY=(field=value[,field=value])@ Specifies that messages that -do not match the specified fields B should be filtered out and not used in the analysis. Any existingC ONLY's that are not specified here will not be changed. The fields that can be used are: ADDRESS=address! ADDRESS=manufacturer-prefix DESTINATION=address% DESTINATION=manufacturer-prefix6 MULTICAST (all destinations that are multicast)E PROTOCOL=aa-bb (where aa-bb is the hexadecimal protocol type) SOURCE=address SOURCE=manufacturer-pref.ix"/SIZE=(sizeoption[,sizeoption...])B Specifies the new characteristics of the message size filter. TheE message size filter is independent of the set of message address andF protocol filters, and its effects are logically AND'ed with the other' enabled filters. The size options are:= DISABLE disables use of message size filter< ENABLE enables use of message size filter@ MAXIMUM=number sets new maximum message size (must be2 / in the range 46 to 1500)@ MINIMUM=number sets new minimum message size (must be2 in the range 46 to 1500) 2 INTERVALD Sets the update rate for the DISPLAY command. The command value isB the number of seconds between updates (initially defaulting to 4> seconds). The value must be in the range of 2 to 60 seconds. The command format is$ SET INTERVAL number-of-seconds2 MANUFACTURERF Adds new entries or modifies existing ones0 in the Ethernet interfaceE manufacturer's table. The first three bytes of the Ethernet addressF identify a manufacturer; the manufacturer's name is displayed beforeD any other information that ETHERMON can derive about an address on the Ethernet. The command format is4 SET MANUFACTURER aa-bb-cc short-name long-name or= SET MANUFACTURER aa-bb-cc short-name "quoted-long-name"0 where aa-bb-cc is the Ethernet address prefix. 3 short-nameI The short na 1me of a manufacturer is a 8-character (max) prefix used for! the real-time DISPLAY commands. 3 long-nameF The long-name of a manufacturer is up to 28 characters in length andJ may be quoted to allow use of lowercase letters, spaces, and punctuation marks in the name. 2 MESSAGESB Enables or disables display of asynchronous "significant event" @ messages on the user terminal. By default, asynchronous event B messages can interrupt any output on your screen any time while  ETHE2RMON is running. The command format is SET MESSAGES ON SET MESSAGES OFFA SET MESSAGES DEBUG {to enable additional event messages}2 PROTOCOL_NAMEE Adds new entries or modifies existing ones in the Ethernet protocolA type/node name table. An Ethernet protocol type may be entered ? with an arbitrary text string (if the string contains blanks,C lowercase letters, or punctuation marks, it should be enclosed in double quotes {"}). The command format3 is5 SET PROTOCOL_NAME ethernet_protocol name_symbol or9 SET PROTOCOL_NAME ethernet_protocol "quoted string"3 ethernet_protocolA A standard 16-bit Ethernet protocol number of two 1- or 2-digitB hexadecimal numbers, low byte first, with the bytes separated by hyphens. For example: 80-5B. 3 name_symbolC A name of up to 24 characters, containing only letters, numbers, @ dollar sign ($), and/or underscore (_). For example: STANFORD.3 quoted_stringD 4A string of text, begun and ended with double quote marks ("); theD quote marks are not included in the string itself, and quote marksE may not be used as part of the string. Only the first 24 characters$ specified will actually be stored.. For example: "Stanford V Kernel experiment".wwſ1 SHOWD Displays status of various internal databases used by the ETHERMON utility. The format of the command is SHOW data-item6 where data-item is one of the na 5mes specified below.2 ADDRESS_NAMESF Displays the Ethernet address and name association table. This tableG is used to find symbolic meanings of source and destination addressesF specified in Ethernet messages. Addresses that have been seen on theG local Ethernet are marked with an 's' (source only), 'd' (destination= only), or 'b' (source and destination). Only addresses thatD are actually used are displayed unless the /ALL qualifier is used. The command format isG SH 6OW ADDRESS_NAMES [Enet-address] [Inet-address] [/qualifier ...]3 Enet-addressE Optionally, an Ethernet address can be specified (either the entireI address or only the manufacturer prefix) in the form aa-bb-cc-dd-ee-ff.A Any of the 6 (or 3, for manufacturer prefix only) bytes can be E specified as hexadecimal numbers or wildcarded by an asterisk "*". D If no Ethernet address is specified, an address of *-*-*-*-*-* is assumed.3 Inet-addressB Optionally, an Internet physical 7 address can be specified in theG form a.b.c.d. Any of the 4 bytes can be specified as decimal numbers I or wildcarded by an asterisk "*". If no Internet address is specified, G none is implied. Note that specifying an Internet address means that B only address table entries that HAVE Internet addresses will be D displayed (since a node without Internet would always fail on the  address matching). 3 qualifiers/ALLE Specifies that all known addresses, not just ones seen as active 8 onF the local cable, will be displayed (subject to restrictions of other parameters and qualifiers)./FULLD Specifies that, for each displayed address, all the protocol typesE spoken by that address will be displayed in addition to the address number and names./OUTPUT[=filespec]F Specifies that the listing should be directed to the specified file.F By default, the listing is sent to SYS$OUTPUT, the user terminal. If@ the filespec is incomplete or missing, the default fil 9espec is$ SYS$DISK:[]ETHERMON_ADDRESSES.LIS./PROTOCOL=aa-bbE Specifies that the listing should only include addresses which haveA used the specified Ethernet or IEEE 802 extended protocol type.B By default, addresses are displayed regardless of protocol types used./SORT=sort-typeD Specifies the display sorting type. The default is /SORT=ETHERNET,C which sorts by physical Ethernet address; other options availableC include /SORT=INTERNET (sort by IP address; non-IP-speakin :g nodesK appear in internal storage order after all IP-using nodes) and /SORT=NONEG (also available as /NOSORT; displays addresses in internal hash table order). /TYPE=valueG Specifies that the listing should only include address which have the) attributes specified. The value can be:J 1) a hexadecimal number in the form %Xnnnn, where the numeric values I correspond to the internal binary flag codes used in the address D table (and seen as the Mxxxx: number ; in SAVE/ADDRESS files);J 2) one or more symbolic names of the flag bits. if more than one nameG is specified, the names must be separated by commas "," and the1 entire list enclosed in parenthesis "()". The symbolic type names are:< DECBRIDGE (%X00080) identified as DEC LAN Bridge8 DECNET (%X00008) running DECnet protocolsE DECSERVER (%x00100) identified as DEC LAT terminal server; DESTINATION (%X00004) node has been a de <stination> DNSSERVER (%X10000) node is an Internet DNS serverB IARP (%X20000) node's IP address confirmed by ARPE INETGATEWAY (%X08000) node is an Internet IP gateway/routerI INETNAME (%X00800) node has a symbolic Internet name definedA INTERNET (%X00010) running DoD Internet IP protocolsK LAVC (%X00200) running DEC Local Area VAXcluster protocols; MACNUM (%X02000) running AppleTalk protocolsC = MACZONE (%X01000) identified as AppleTalk zone router9 MOP (%X04000) running DEC MOP protocols6 SOURCE (%X00002) node has been a sourceN UB (%X00020) node is running Ungermann-Bass (XNS) protocols= VITALINK (%X00400) identified as Vitalink bridgeE XYPLEX (%X00040) running Xyplex terminal net protocols 2 BRIDGESB Displays a list of all Ethernet bridges that were recognized andF identified by ETHERMON. Op>tionally, a map of bridge interconnections can be obtained as well. The command format is# SHOW BRIDGES [/qualifier ...] 3 qualifiers/FULLC Specifies that, for each displayed bridge, all the protocol typesB spoken by that address, and all the adjacent bridges in the mostK recently computed bridge map will be displayed in addition to the addressJ number and names. Note that, if a new bridge has been detected since theE last use of the MAP command, a warning message w ?ill be displayed to- alert you that your map may be out of date./OUTPUT[=filespec]F Specifies that the listing should be directed to the specified file.F By default, the listing is sent to SYS$OUTPUT, the user terminal. If@ the filespec is incomplete or missing, the default filespec is" SYS$DISK:[]ETHERMON_BRIDGES.LIS. 2 FILTERSE Displays the currently defined Ethernet message filters; the filterG number (used for SET FILTER and CLEAR FILTER), enable/disable status,H and th @e protocol type/source address/destination address (if used) and= associated matching state(s) are displayed for each filter.2 MANUFACTURERSG Displays the currently known manufacturer prefix codes and associatedH names. Codes that have been seen on the local Ethernet are marked withC an 's' (source only), 'd' (destination only), or 'b' (source and D destination). Only codes that have actually been used on the local< cable will be displayed unless the /ALL qualifier is used. ThAe command format is) SHOW MANUFACTURERS [/qualifier ...] 3 qualifiers/ALLI Specifies that all known manufacturers, not just ones seen as active on% the local cable, will be displayed./OUTPUT[=filespec]F Specifies that the listing should be directed to the specified file.F By default, the listing is sent to SYS$OUTPUT, the user terminal. If7 the filespec is incomplete or missing, the default is( SYS$DISK:[]ETHERMON_MANUFACTURERS.LIS. 2 MESSAGESH Displays the curreBnt setting of the SET MESSAGES command for enabling F or disabling output of asynchronous "significant event" messages to  the user terminal. The command format is SHOW MESSAGES 2 PERFORMANCEC Displays performance statistics of ETHERMON's internal operation. Command format:# SHOW PERFORMANCE [/qualifier] 3 Qualifiers/INTERVAL=delta-timeH Specifies the period of time the command will runs before it stops and C analyzes the data. Days may not be specified; oCnly hours, minutes,5 seconds, and hundredths of seconds may be specified. 2 PORT_STATUSF Displays the current status of ETHERMON's connection to the Ethernet interface.3 Command_qualifiers/ZEROB Specifies that, after the port counters are read, they should be zeroed.2 PROTOCOL_NAMESF Displays the Ethernet protocol type and name association table. ThisE table is used to find symbolic meanings of protocol types specifiedE in Ethernet messages. Protocol types specified wDith a preceding '*'C have been seen on the local Ethernet. Only seen protocols will be. displayed unless the /ALL qualifier is used. The command format is* SHOW PROTOCOL_NAMES [/qualifier ...] 3 qualifiers/ALLH Specifies that all known protocol types, not just ones seen as active ( on the local cable, will be displayed./OUTPUT[=filespec]F Specifies that the listing should be directed to the specified file.F By default, the listing is sent to SYS$OUTPUT, the user teErminal. If7 the filespec is incomplete or missing, the default is$ SYS$DISK:[]ETHERMON_PROTOCOLS.LIS.wwſ1 SPAWNA Spawns a DCL subprocess to execute normal DCL commands, leavingF Ethermon collecting raw address and protocol data in the background. Format: SPAWN [command] 2 commandB A single DCL command may be executed by specifiying it after the@ SPAWN command. If no command is given, the subprocess enters a/ prompting mode until the subprocesFs logs out.wwſ 1 SUMMARIZEG Tallies up the total number of messages found on the network for eachC address, protocol type, or whatever is being sorted for, over theH specified sampling interval. Samples are taken for the interval set byG the SET INTERVAL command (unless the /INTERVAL qualifier is used hereG to override), and then a report is generated, displaying the messagesF counts and associated identifiers sorted in decreasing message count order. GThe command format is' SUMMARIZE group-type [/qualifier]2 DESTINATIONSB Specifies that the summary should be over destination addresses. 2 INTERNETG Specifies that the summary should be over 2nd level protocols used inE Internet IP (DOD) [06-00] protocol type messages. Additionally, for= TCP and UDP protocols, the active port numbers are counted. 2 PROTOCOLS; Specifies that the summary should be over protocol types.2 SIZES9 Specifies that the summary should beH over packet sizes. 2 SOURCES= Specifies that the summary should be over source addresses. 2 STATISTICSE Specifies that the summary should be of general interface counters.2 Command_qualifiers/INTERVAL=delta-timeH Specifies the period of time the command will runs before it stops and C analyzes the data. Days may not be specified; only hours, minutes,5 seconds, and hundredths of seconds may be specified./OUTPUT[=filespec]F Specifies that the listing should be directed to I the specified file.F By default, the listing is sent to SYS$OUTPUT, the user terminal. If7 the filespec is incomplete or missing, the default is SYS$DISK:[]ETHERMON.SUM.ww  ſ1 TRACEI Collects messages received from the Ethernet into a file, as restrictedF by the currently enabled filter set. The TRACE command runs for the L period of time specified by the SET INTERVAL command, unless the /INTERVALB qualifier is specified with a different period. The file can bJe J recorded in either binary or printable ASCII format. The trace will only8 record data that passes the currently enabled filters. The command format is$ TRACE [/qualifier[/qualifier]]2 Command_Qualifiers/ABORTK Specifies that any running asynchronous TRACE should be closed immediately (repeating or not)./ASCIIJ Specifies that the output file will be in ASCII format. If not specified, the default is binary format./BINARYK Specifies that the output file will bKe in binary format. If not specified, the default is binary format./INTERVAL=delta-timeH Specifies the period of time the trace will run before it stops and theK collection file is closed. Days may not be specified; only hours, minutes,5 seconds, and hundredths of seconds may be specified./OUTPUT=filespecK Specifies the name of the output file; if not specified, the filename willF be ETHERMON.DAT for binary format, and ETHERMON.LIS for ASCII format. /PARALLELL Specifies that an L asynchronous trace will be performed, i.e. the trace willJ be started and control will return to the command prompt immediately, notI waiting for the trace to complete. Messages will be sent to the terminal% when the trace starts and completes. /REPEAT[=n]J Specifies that a repeating asynchronous trace will be performed, i.e. theD trace will be started and control will return to the command promptH immediately, not waiting for the trace to complete. After the specifiedH interval, the tra Mce file will be closed, a new file version opened, andG the trace continued. If the optional number is specified, it specifiesH a version limit for trace files; versions older than (current - N) will0 be deleted automatically as the trace proceeds.B A repeating trace should be stopped with the TRACE/ABORT command.2 File_formats3 ASCIIH The ASCII file contains three lines for each received and filter-passedE Ethernet message. The first line contains the VMS timestamp when theG message N was received, the source and destination addresses in standardF ASCII-hexadecimal format, the protocol type (also ASCII-hex), and theI message body's length in bytes. The second line is a hexadecimal dump ofG the first 40 bytes of the received message; the third line is the sameJ 40 bytes dumped in ASCII (with a space before each actual character, suchI that the ASCII characters line up under their hexadecimal bytes; periods+ are displayed for unprintable characters).I Preceding the dum Op lines is a single line reporting when the dump began.E Following the dump lines are three lines reporting when the dump wasF completed, and the quantity of data bytes and messages processed from) the Ethernet before and after filtering.K The file has carriage-return carriage control and variable-length records.3 BinaryE The binary file contains one variable-length record per received andK filter-passed Ethernet message. A set of structure definitions for various languages are lPisted below. 4 FORTRAN STRUCTURE /BIN_REC/; INTEGER*4 VMS_DATETIME(2) ! quadword system timestampL BYTE DESTADDR(0:5) ! beginning of XEDRIVER P5 buffer: dest addr9 BYTE SRCADDR(0:5) ! source Ethernet address UNION MAP8 BYTE PROTOCOL(0:1) ! Ethernet protocol type END MAP MAP: BYTE DSAP ! IEEE 802 destination SAP5 BYTE SSAP ! IEEE 802 source SAP UNION Q MAP6 BYTE CTL(0:1) ! IEEE 802 CTL byte(s) END MAP MAP< BYTE ECTL ! IEEE extended 802 CTL byteK BYTE PID(0:4) ! IEEE extended 802 Protocol IDentification END MAP END UNION END MAPF END UNION ! end of XEDRIVER P5 buffer (20 bytes)8 INTEGER*2 LENGTH ! length of message bodyI BYTE BODY(1500) ! not all of this array may be sent; onlyG R ! part actually used is written to file END STRUCTURE ! /BIN_REC/4 MACRO $DEFINI REC= $EQU REC$Q_TIME 0 ; VAX/VMS binary timestamp? $EQU REC$B_DESTADDR 8 ; 6-byte destination address: $EQU REC$B_SRCADDR 14 ; 6-byte source addressB $EQU REC$B_PROTOCOL 20 ; 2-byte Ethernet protocol type9 $EQU REC$B_DSAP 20 ; 1-byte IEEE 802 DSAP9 $EQU REC$B_SSAP 21 ; 1-byte IEEE 802 S SSAPD $EQU REC$B_CTL 22 ; 1- or 2-byte IEEE 802 CTL fieldG $EQU REC$B_ECTL 22 ; 1-byte IEEE extended 802 CTL fieldI $EQU REC$B_PID 23 ; 5-byte IEEE extended 802 protocol ID@ $EQU REC$W_LENGTH 28 ; word length of message body4 $EQU REC$T_BODY 30 ; body of messageB $EQU REC$K_MAXLEN 1530 ; maximum length of file record $DEFEND RECww@ſ1 WAITB Causes ETHERMON to hang for a Tspecified period of time, or untilD re-activated by another process. This is primarily useful in batchB jobs where the repeating mode of the TRACE command is preferred,B but where ETHERMON would exit when no longer given any commands.F The WAIT can be terminated before its specified end time by enteringA any keyboard character (for interactive mode use) or by issuingI a $WAKE service request at the process running ETHERMON. An appropriate= message will be output indicating how the WAUIT was aborted. The command format is( WAIT delta-time [optional message]% WAIT FOREVER [optional message] 2 Parameters 3 delta-timeE Specifies the period of time the WAIT will hang before it stops and F execution is resumed. Days may not be specified; only hours, minutes,5 seconds, and hundredths of seconds may be specified. 3 FOREVERF Specifies that the WAIT will only be terminated by outside action; if9 no outside abort is entered, the WAIT will last forever.3 optional messageD Specifies an optional string of text which will be displayed on theD standard output device (terminal or batch log file) before the WAITE begins. This is useful for ETHERMON script files, where the commands+ being executed cannot be seen by the user.ww