tninfo

- print kernel-level network information and statistics

Synopsis

/usr/sbin/tninfo [-h hostname] [-i interface_ip_address]
     [-m zone-name] [-t template]

Description

tninfo provides an interface to retrieve and display kernel-level network information and statistics.

Options

-h hostname

Display the security structure for the specified host in the remote-host cache. The output should reflect what is specified in the tnrhdb database.

-i interface_ip_address

Display the template associated with the IP interface that hosts the IP address.

-m zone-name

Display the MLP configuration associated with the specified zone. The output should reflect what is specified in the tnzonecfg database.

-t template

Display the structure associated with the specified template. The output should reflect what is specified in the tnrhtp database.

Examples

Example 1 Displaying Remote Host Structures Cached in the Kernel

This example shows the remote host structures cached in the kernel. The output reflects the definition in the tnrhdb database.

# tninfo -h machine1
   IP address= 192.168.8.61
   Template = cipso

Example 2 Displaying Multilevel Ports for the Global Zone

This example shows the kernel-cached MLPs for the global zone. The output reflects the definition in the tnzonecfg database, plus any dynamically allocated MLPs. private indicates zone-specific MLPs.

# tninfo -m global
private:23/tcp;111/tcp;111/udp;515/tcp;2049/tcp;6000-6003/tcp;
        32812/tcp;36698/ip;38634/tcp;64365/ip
shared: 6000-6003/tcp

Example 3 Displaying the cipso and netif Template Definitions

This example shows the kernel-cached cipso template definition. The output reflects the definition in the tnrhtp database.

# tninfo -t cipso
=====================================
   Remote Host Template Table Entries:
   __________________________
   template: cipso
   host_type: CIPSO
   doi: 1
   min_sl: ADMIN_LOW
   hex: ADMIN_LOW
   max_sl: ADMIN_HIGH
   hex: ADMIN_HIGH

# tninfo -t netif
=====================================
  Remote Host Template Table Entries:
  __________________________
  template: netif
  host_type: NETIF
  doi: 1
  def_label: ADMIN_LOW
  hex: ADMIN_LOW
  min_sl: ADMIN_LOW
  hex: ADMIN_LOW
  max_sl: ADMIN_LOW
  hex: ADMIN_LOW

Example 4 Displaying Template Name Associated with an IP Interface

The example command below shows the kernel-cached template name associated with the interface on which the IP address is hosted.

# tninfo -i 192.168.3.10
IP address= 192.168.3.10
Template = netif

Files

/etc/security/tsol/tnrhdb

Trusted network remote-host database

/etc/security/tsol/tnrhtp

Trusted network remote-host templates

/etc/security/tsol/tnzonecfg

Trusted zone configuration database

Attributes

See attributes(5) for descriptions of the following attributes:

The command line is Committed. The output is Uncommitted.

See Also

tnd(1M), tnctl(1M), attributes(5)

Trusted Extensions Configuration and Administration

Notes

The functionality described on this manual page is available only if the system is configured with Trusted Extensions.