Installing Tcpview 1. Create a directory for the tcpview support files. I use /usr/local/lib/tcpview. Create /usr/local/lib/tcpview/filters for the filters. Copy BGP, generic, and telnet from bin to the filters directory. Copy manuf and hosts to /usr/local/lib/tcpview. Edit the last two files as needed. 2. Edit a copy of the tcpview resource file, which is DOC/Tcpview. Change the entries for Tcpview.filters, Tcpview.manuf, and Tcpview.hostnames to be the same as step 1. 3. Put "Tcpview" in the system application resource directory (usually /usr/lib/X11/app-defaults/ ) or set the environmental variable XAPPLRESDIR to your personal resource directory. 4. To decode SNMP packets, you need a copy of the SNMP MIB in MOSY format. the file UTIL/mib.txt contains the basic MIB. To add any site-specific mibs, run them trhough MOSY and append them to the end of the standard MIB. For a copy of MOSY, download the UW-CMU SNMP package on ftp.cac.washington.edu. Tcpdump and tcpview will search for the mib file in the following locations, using the first one found: the environmental variable "MIBFILE", ./mib.txt, and /usr/local/lib/tcpview/mib/mib.txt. 5. If you are running on an Ultrix system, you will have to run pfconfig before you can capture any data. On a Sun system, you should make sure to install tcpdump and tcpview setuid to root. Good luck. If you have any major problems or suggestions, contact Martin Hunt martinh@cac.washington.edu