DUMP
Purpose
Format the IP header, protocol header and packet data in hexadecimal. The data can also be translated into EBCDIC, ASCII or both.
Format
The following command was used to
obtain the example of this report.
CTRACE COMP(SYSTCPIS) SUB((TCPCS)) DSNAME('IBMUSER.CTRACE1') SHORT OPTIONS((OPT DUMP)) COMPONENT TRACE SHORT FORMAT
SYSNAME(MVS118)
COMP(SYSTCPIS)SUBNAME((TCPCS))
OPTIONS((OPT DUMP))
DSNAME('IBMUSER.CTRACE1')
OPTIONS((Both Bootp(67,68) Cleanup(500) DelayAck(200,200) Domain(53)
Dump(65535) Finger(79) Flags() Ftp(20,21) Gain(125,250) Gopher(70)
Limit(999999999) Gmt Ntp(123) Option Noreassembly Router(520) Rpc(111)
Segment Smtp(25) Snmp(161,162) Speed(10,10) Telnet(23) Tftp(69) Time(37)
Userexit() Www(80)
))
**** 2002/11/20
RcdNr Sysname Mnemonic Entry Id Time Stamp Description
----- -------- -------- -------- --------------- --------------------------------
-------------------------------------------------------------------------------
4521 MVS118 SCAN 03030000 17:38:32.175560 Scan-Normal packet
From Link : ETH1 Device: LCS Ethernet Full=40
Tod Clock : 2002/11/20 17:38:32.175559 Module: EZBIPICM
Job Name : TCPCS Asid: 01F7 Tcb: 00000000
Cid : 00000000 Correlator: 10
Policy : ScanEventIcmp-rule
1 IP Header : 20
000000 45000028 00004000 3E015914 092A6947 092A6826
2 Protocol Header : 8
000000 08005592 0B3F0000
3 Data : 12 Data Length: 12
000000 AEBCDB3D 03340A00 00000000 |............ ...=.4...... |
-------------------------------------------------------------------------------
4522 MVS118 SCAN 03030026 17:38:45.130339 Scan Normal-TCP SYN dropped
From Link : UNKNOWN Device: Unknown:0 Full=40
Tod Clock : 2002/11/20 17:38:45.130338 Module: EZBTCPCN
Job Name : FTPD1 Asid: 01F7 Tcb: 00000000
Cid : 00000020 Correlator: 11
Policy : ScanEventHigh-rule
IP Header : 20
000000 45000028 163F0000 FD06681C 0902C522 092A6826
Protocol Header : 20
000000 B73F0015 8EEC917D 00000000 500200F2 4E530000
-------------------------------------------------------------------------------
4523 MVS118 SCAN 03030026 17:38:45.153474 Scan Normal-TCP SYN dropped
From Link : UNKNOWN Device: Unknown:0 Full=40
Tod Clock : 2002/11/20 17:38:45.153473 Module: EZBTCPCN
Job Name : FTPD1 Asid: 01F7 Tcb: 00000000
Cid : 00000020 Correlator: 12
Policy : ScanEventHigh-rule
IP Header : 20
000000 45000028 173F0000 FD068D84 09E09DDC 092A6826
Protocol Header : 20
000000 B83F0015 76399A57 00000000 500200F2 5D2C0000
.
.
.
===============================================================================
SYSTCPIS Trace Statistics
2,623 ctrace records processed
0 segmented trace records read
0 segmented trace records were lost
2,623 trace records read
0 records could not be validated
2,623 records passed filtering
2,623 packet trace records processed
0 data trace records processedThe following describes
numbered areas of the example.
- 1
- The IP header is dumped with no translation.
- 2
- The protocol header is dumped with no translation.
- 3
- The packet data is dumped with the translation specified by the ASCII, BOTH, EBCDIC, or HEX keyword. The default is BOTH. The amount of data dumped can be limited by the value specified with the DUMP keyword. The default is 65535 bytes.