To collect packet headers from the SCNM host, do the following:
First, start monitord on a host where the packet headers will be sent to:
monitord &
monitord writes out data to file named
FC_N_SRCIP:SRCPORT_DSTIP:DSTPORT.EXT, where:
An example file might be named:
FC0160598_104.101.32.200:43196_80.87.164.90:61497_80ce000.dat
or
VR555_13.23.200.111:0_13.23.200.244:1901_80ce000.dat
The file name will start with either FR (for fixed record) or VR (for variable length records).
The file name should look like this:
FC0160598_104.101.32.200:43196_80.87.164.90:61497.dat
if it looks like:
FC0160598_104.101.32.200:43196_80.87.164.90:61497_80ce000.dat
(notice the 7 extra chars near the end), it is a 'temporary' file, and will be renamed without the 7 extra chars when the session finishes.