Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Is there a tool which I can use to monitor network traffic so that I can determine firewall rules and implement them on an existing network?

share|improve this question

migrated from May 21 '10 at 16:47

This question came from our site for professional and enthusiast programmers.

What type of firewall do you have? – l0c0b0x May 21 '10 at 16:50

Well, sounds like you just need to get a good read on what sort of traffic is crossing your network. For that, set up a mirrored port on one of your switches, connect a PC to it, and fire up Wireshark. After getting a packet capture, you'll be able to very easily see what's going on.

When doing this sort of work, I typically start from a "deny all" perspective. Assume that you're going to block everything, and then make a list of what applications need to be accessible through the firewall, and what allow rules you'll need for each of them.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.