From: janssen@parc.xerox.com (Bill Janssen)
Subject: Re: Monitoring & Diagnosis of corba client/server interactions
Date: 13 Apr 1999 00:00:00 GMT
Message-ID: <y1ayajwvxgp.fsf@holmes.parc.xerox.com>
References: <7ege4i$ltg$1@nnrp1.dejanews.com>
Organization: parc.xerox.com
Newsgroups: comp.object.corba

Prashant,

I've modified 'tcpdump', a standard unix network monitoring tool, to
interpret IIOP streams.  I find it to be quite useful for non-invasive
monitoring of CORBA communications.  It's available in source form as
ftp://ftp.parc.xerox.com/transient/janssen/tcpdump-3.4a6-rpc.tar.Z.
Here's a sample dump of the Orbix cubit example running between an ILU
client on 'watson' and an ILU server on 'insight'.  For each IIOP
'packet' it sees (a packet is a fragment in IIOP 1.1, or a message in
IIOP 1.0), it prints out a header

  d(bytes=N,[push,],version=MAJOR.MINOR,ENDIANNESS)

It then optionally dumps the bytes of the packet, then prints out an
interpretation of the GIOP message contained in the packet:

  <giop MTYPE(MPARMS)>

where MTYPE is "i" for a request (invocation), "r" for reply, or "c"
for a control message (all others).  MPARMS vary depending on the message
type; for a request, you get

  vers=MAJOR.MINOR,[context=CONTEXT,...],sn=SERIAL-NUMBER,
  method=METHOD-NAME,disc=KEY-OF-DISCRIMINANT)>

For a reply,

  vers=MAJOR.MINOR,[context=CONTEXT,...],sn=SERIAL-NUMBER,
  REPLY-STATUS

For various control messages, the data associated with those
messages.

watson : 40 % ./tcpdump -P -T iiop -M giop -N host insight and tcp and port 33217
17:29:18.592580 watson.41876 > insight.33217: S 1452944633:1452944633(0) win 8760 <mss 1460> (DF)
17:29:18.592988 insight.33217 > watson.41876: S 865185575:865185575(0) ack 1452944634 win 8760 <mss 1460> (DF)
17:29:18.593062 watson.41876 > insight.33217: . ack 1 win 8760 (DF)
17:29:18.594927 watson.41876 > insight.33217: P 1:122(121) ack 1 win 8760 <iiop
  d(bytes=109,push,vers=1.0,big-endian)
     0:  47 49 4f 50  01 00 00 00  00 00 00 6d                GIOP.......m
     0:  00 00 00 01  00 00 00 01  00 00 00 0c  00 01 00 70   ...............p
    16:  00 01 00 01  00 01 01 00  00 00 00 01  01 00 00 00   ................
    32:  00 00 00 31  69 6c 75 00  49 44 4c 3a  45 6e 67 2e   ...1ilu.IDL:Eng.
    48:  53 55 4e 2e  43 4f 4d 2f  43 75 62 69  74 3a 31 2e   SUN.COM/Cubit:1.
    64:  30 00 63 75  62 69 74 2d  73 65 72 76  65 72 00 63   0.cubit-server.c
    80:  75 62 69 74  00 00 00 00  00 00 00 0b  63 75 62 65   ubit........cube
    96:  5f 6f 63 74  65 74 00 00  00 00 00 00  0d            _octet.......
  <giop i(vers=1.0,context=CodeSets(char=0x10001(ISO Latin1),wchar=0x10100(Unicode UCS-2)),sn=1,method="cube_octet",disc="ilu\000IDL:Eng.SUN.COM/Cubit:1.0\000cubit-server\000cubit\000")>
> (DF)
17:29:18.595507 insight.33217 > watson.41876: . ack 122 win 8760 (DF)
17:29:18.596882 insight.33217 > watson.41876: P 1:46(45) ack 122 win 8760 <iiop
  d(bytes=33,push,vers=1.0,big-endian)
     0:  47 49 4f 50  01 00 00 01  00 00 00 21                GIOP.......!
     0:  00 00 00 01  00 00 00 01  00 00 00 0c  00 01 00 68   ...............h
    16:  00 01 00 01  00 01 01 00  00 00 00 01  00 00 00 00   ................
    32:  95                                                   .
  <giop r(vers=1.0,context=CodeSets(char=0x10001(ISO Latin1),wchar=0x10100(Unicode UCS-2)),sn=1,Success)>
> (DF)
17:29:18.611555 watson.41876 > insight.33217: P 122:224(102) ack 46 win 8760 <iiop
  d(bytes=90,push,vers=1.0,big-endian)
     0:  47 49 4f 50  01 00 00 00  00 00 00 5a                GIOP.......Z
     0:  00 00 00 00  00 00 00 02  01 00 00 0c  00 00 00 31   ...............1
    16:  69 6c 75 00  49 44 4c 3a  45 6e 67 2e  53 55 4e 2e   ilu.IDL:Eng.SUN.
    32:  43 4f 4d 2f  43 75 62 69  74 3a 31 2e  30 00 63 75   COM/Cubit:1.0.cu
    48:  62 69 74 2d  73 65 72 76  65 72 00 63  75 62 69 74   bit-server.cubit
    64:  00 00 63 75  00 00 00 0b  63 75 62 65  5f 73 68 6f   ..cu....cube_sho
    80:  72 74 00 74  00 00 00 00  ff 8b                      rt.t......
  <giop i(vers=1.0,sn=2,method="cube_short",disc="ilu\000IDL:Eng.SUN.COM/Cubit:1.0\000cubit-server\000cubit\000")>
> (DF)
17:29:18.612939 insight.33217 > watson.41876: P 46:72(26) ack 224 win 8760 <iiop
  d(bytes=14,push,vers=1.0,big-endian)
     0:  47 49 4f 50  01 00 00 01  00 00 00 0e                GIOP........
     0:  00 00 00 00  00 00 00 02  00 00 00 00  8f b3         ..............
  <giop r(vers=1.0,sn=2,Success)>
> (DF)
17:29:18.621370 watson.41876 > insight.33217: P 224:328(104) ack 72 win 8760 <iiop
  d(bytes=92,push,vers=1.0,big-endian)
     0:  47 49 4f 50  01 00 00 00  00 00 00 5c                GIOP.......\
     0:  00 00 00 00  00 00 00 03  01 00 00 0c  00 00 00 31   ...............1
    16:  69 6c 75 00  49 44 4c 3a  45 6e 67 2e  53 55 4e 2e   ilu.IDL:Eng.SUN.
    32:  43 4f 4d 2f  43 75 62 69  74 3a 31 2e  30 00 63 75   COM/Cubit:1.0.cu
    48:  62 69 74 2d  73 65 72 76  65 72 00 63  75 62 69 74   bit-server.cubit
    64:  00 00 63 75  00 00 00 0a  63 75 62 65  5f 6c 6f 6e   ..cu....cube_lon
    80:  67 00 00 74  00 00 00 00  ff ff ff 8b                g..t........
  <giop i(vers=1.0,sn=3,method="cube_long",disc="ilu\000IDL:Eng.SUN.COM/Cubit:1.0\000cubit-server\000cubit\000")>
> (DF)
17:29:18.622713 insight.33217 > watson.41876: P 72:100(28) ack 328 win 8760 <iiop
  d(bytes=16,push,vers=1.0,big-endian)
     0:  47 49 4f 50  01 00 00 01  00 00 00 10                GIOP........
     0:  00 00 00 00  00 00 00 03  00 00 00 00  ff e7 8f b3   ................
  <giop r(vers=1.0,sn=3,Success)>
> (DF)
17:29:18.631867 watson.41876 > insight.33217: P 328:438(110) ack 100 win 8760 <iiop
  d(bytes=98,push,vers=1.0,big-endian)
     0:  47 49 4f 50  01 00 00 00  00 00 00 62                GIOP.......b
     0:  00 00 00 00  00 00 00 04  01 00 00 0c  00 00 00 31   ...............1
    16:  69 6c 75 00  49 44 4c 3a  45 6e 67 2e  53 55 4e 2e   ilu.IDL:Eng.SUN.
    32:  43 4f 4d 2f  43 75 62 69  74 3a 31 2e  30 00 63 75   COM/Cubit:1.0.cu
    48:  62 69 74 2d  73 65 72 76  65 72 00 63  75 62 69 74   bit-server.cubit
    64:  00 00 63 75  00 00 00 0c  63 75 62 65  5f 73 74 72   ..cu....cube_str
    80:  75 63 74 00  00 00 00 00  0d ff ff 8b  ff ff ff 8b   uct.............
    96:  ff 8b                                                ..
  <giop i(vers=1.0,sn=4,method="cube_struct",disc="ilu\000IDL:Eng.SUN.COM/Cubit:1.0\000cubit-server\000cubit\000")>
> (DF)
17:29:18.634089 insight.33217 > watson.41876: P 100:134(34) ack 438 win 8760 <iiop
  d(bytes=22,push,vers=1.0,big-endian)
     0:  47 49 4f 50  01 00 00 01  00 00 00 16                GIOP........
     0:  00 00 00 00  00 00 00 04  00 00 00 00  95 e7 8f b3   ................
    16:  ff e7 8f b3  8f b3                                   ......
  <giop r(vers=1.0,sn=4,Success)>
> (DF)
17:29:18.649260 watson.41876 > insight.33217: F 438:438(0) ack 134 win 8760 (DF)
17:29:18.649526 insight.33217 > watson.41876: . ack 439 win 8760 (DF)
17:29:18.649834 insight.33217 > watson.41876: F 134:134(0) ack 439 win 8760 (DF)
17:29:18.649908 watson.41876 > insight.33217: . ack 135 win 8760 (DF)
watson : 41 % 
-- 
 Bill Janssen  <janssen@parc.xerox.com> (650) 812-4763  FAX: (650) 812-4777
 Xerox Palo Alto Research Center, 3333 Coyote Hill Rd, Palo Alto, CA  94304
 URL:  ftp://ftp.parc.xerox.com/pub/ilu/misc/janssen.html