Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

Is there a tool which I can use to monitor network traffic so that I can determine firewall rules and implement them on an existing network?

share|improve this question
    
What type of firewall do you have? –  l0c0b0x May 21 '10 at 16:50
add comment

migrated from stackoverflow.com May 21 '10 at 16:47

This question came from our site for professional and enthusiast programmers.

1 Answer

Well, sounds like you just need to get a good read on what sort of traffic is crossing your network. For that, set up a mirrored port on one of your switches, connect a PC to it, and fire up Wireshark. After getting a packet capture, you'll be able to very easily see what's going on.

When doing this sort of work, I typically start from a "deny all" perspective. Assume that you're going to block everything, and then make a list of what applications need to be accessible through the firewall, and what allow rules you'll need for each of them.

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.