To start iptrace, for example when I wanted to trace packets between nim & ananda, iptrace -d nim -s ananda -b nim.trace The only way to stop it is to kill the PID. You might also want to put the -a option on the iptrace command to not get the arp broadcasts. ------------------------------------------------------------------- To format the output, ipreport nim.trace > nim.output ------------------------------------------------------------------- On the iptrace command, you can also specify a protocol and/or a port number with -P tcp|udp and -p mail|25 or ntp|123 The Protocol variable can be a decimal number or name from the /etc/protocols file. The Port variable can be a decimal number or name from the /etc/services file. ------------------------------------------------------------------- The iptrace & ipformat commands are a part of the bos.net.tcp.server fileset, which is on the bos.net file on the AIX 4.3.3 install CDs. It is not installed by default with a fresh AIX install. -------------------------------------------------------------------