snoop Options Let's take a look at what options we can use with snoop . TABLE C-2 depicts two columns which describe snoop options. Table C-2. Common snoop Options Options | Definition | -c maxcount | Exit after capturing maxcounts packets | -C | List the code generated from the filter expression for either the kernel packet filter, or snoop 's own filter | -d device | Receive packets from the network using the interface specified by device, usually, le0 or hme0. | -D | Display the number of packets dropped during a capture on the summary line. | -i filename | Display packets previously captured in a filename. | -n filename | Use the filename as an IP address to name mapping table. | -N | Create an IP address to name file from a capture file. | -o filename | Save the captured packets in a filename as they are captured. | -p first , last | Select one or more packets to be displayed from a captured file. | -P | Capture packets in non-promiscuous mode. | Changes to the snoop Utility in the Solaris OE TABLE C-3 depicts some of the new options that have been added to the Solaris snoop command. Table C-3. New snoop Options New Solaris OE Options | Definition | -q | When capturing network packets into a file, do not display the packet count. | -r | Do not resolve the IP address to the symbolic name. This option prevents snoop from generating network traffic while capturing and displaying packets. | inet, inet6, inetboth | A qualifier that modifies the host primitive. If you specify inet, then try to resolve the host name to an IPv4 address. If you specify inet6, then try to resolve to an IPv6 address. If you specify inetboth, then try both IP v4 and IPv6, either or none. | slp | Tells snoop to select an SLP packet. | |