To perform a Packet Trace on a filer, use the following steps:

1. Logon to the filer as root, via telnet or ssh

2. Issue the following command to start capturing network traffic:

 

filer> pktt start all -d /etc -i
 

where is the ipaddress of the Windows EV server

Note: Commands for "pktt" are invoked as follows:
pktt start   |all [-d dir] [-s size] [-m pklen] [-b bsize] [-i ipaddr ...] [-v]

3. Reproduce the problem  

4. Stop the capture using the following command:

 

filer> pktt stop all
 

This will create a .trc file in the /etc directory on the filer. The file can be accessed from a client by mapping the filer's C$ share.

The trace can be viewed with Ethereal (www.ethereal.com) or can be converted to the Windows NT Server Network. (Monitor (Netmon) format using the capconv.exe program available on the NetApp NOW site download page.)

For Additional information concerning the pktt command, switches, or issues while attempting to use the command; please contact NetApp support.