								August, 1990

This is NFSWATCH Version 2.0.  It lets you monitor NFS requests to any
given machine, or the entire local network.  It only monitors NFS
client traffic (NFS requests), it does not (and cannot) monitor the
return traffic from the server in response to those requests.

There are some new features in this version, mostly due to Jeff Mogul
of DEC.  There are also some bug fixes.

	- Now runs under Ultrix 4.0 with the PFILT packet filter.

	- New option "-all" allows you to watch all NFS requests on the
	  local network.  Prints remote server file systems as
	  major/minor numbers.

	- Now "learns" about new file systems as it sees them go by.

	- You can sort the file system display either alphabetically
	  (as before) or by percent usage.

	- Now works properly on SPARC systems.

	- Uses the NIOCSSNAP feature of the NIT on Suns under SunOS
	  4.1 to reduce the amount of data copied around.  This is not
	  done under SunOS 4.0.x, because it seems to be full of bugs,
	  at least on the Sun-3.  A similar feature is used under
	  Ultrix.

NFSWATCH has been tested on the following architectures:

	Sun 3/80  SunOS 4.1
	Sun 3/280 SunOS 4.0.3

	Sun 4/20  SunOS 4.1
	Sun 4/60  SunOS 4.1
	Sun 4/260 SunOS 4.0.3
	Sun 4/380 SunOS 4.1
	Sun 4/390 SunOS 4.1

	DEC VAX   Ultrix 4.0
	DEC RISC  Ultrix 4.0

To compile NFSWATCH, just type "make".  On SunOS systems, it needs to
either be run as root, or made setuid root (this is safe; it setuids
itself back after opening the NIT device).  On Ultrix systems, it does
not need to be setuid root or run as root, but the super-user has to
enable promiscuous mode operation using pfconfig(8).

On Ultrix systems, the enclosed "pfcopyall" program can be used to
change the value of this variable in the kernel so that you can see
packets from the host you are running on.  Otherwise, these packets
will not be included in the output of NFSWATCH.

You can redistribute this program as much as you want.  All I ask is
that you leave my name on my parts, and Jeff's name on his parts.
Give credit where credit is due.  If you make modifications or bug
fixes, please send them to me so they can be incorporated in the next
release.

Dave Curry
SRI International
333 Ravenswood Avenue
Menlo Park, CA 94025
davy@itstd.sri.com
