1
vote
1answer
59 views

Email administrator when a duplicate IP is found on the network

It was suggested that I ask this question on serverfault. I know this is a bit of a custom requirement but I was hoping someone currently has (or can put together) a script that checks for duplicate ...
6
votes
5answers
695 views

Nagios server best practices?

I run a medium-sized Nagios server. It monitors roughly 40 servers with 180 services currently and is only growing by the day. I migrated from an old Nagios setup that was configured in a very ...
0
votes
3answers
143 views

Monitor HTTP usage on network from Linux free [closed]

I manage a small office network. I am looking to start monitoring/logging internet usage (website requests) for each user on a small network. All the windows clients are running through a switch to a ...
-1
votes
3answers
731 views

Script to log internet connectivity outage [closed]

What is the best approach to setting up a script to monitor and report a server's connection to the Internet? I'm not referring to connection to the local network, but rather a server's (or the whole ...
0
votes
1answer
180 views

add a cgroup controller into libvirt

libvirt by default has cgroup controllers of ["cpu", "devices", "memory", "blkio", "cpuacct"] as shown in qemu.conf. I want to add one more controller of net_cls. I tried to modify the config file to ...
0
votes
1answer
52 views

Developing an SNMP agent for linux

I'm developing a snmp agent for linux and I wonder if there is a directory or file proper protocol statistics snmp OIDs to develop snmpInPkts, snmpOutPkts, snmpInBadVersions, snmpInBadCommunityNames. ...
0
votes
2answers
522 views

Is My Website Under DDOS Attack? [closed]

Recently I noticed that the CPU load of my server is increasing rapidly. In any day, the CPU load does not reach 2.5. I have the following server: Intel® Xeon® E3-1270 v2 Single Processor - Quad Core ...
0
votes
1answer
177 views

monitor vps bandwidth usage

I have a vps guest whose ip is 192.168.1.20. I add the following lines to iptables, # iptables -A FORWARD -o eth0 -s 192.168.1.20 # iptables -A FORWARD -i eth0 -d 192.168.1.20 Then I run this line ...
1
vote
2answers
904 views

Wireshark does not capture HTTP on 8080

I am running Wireshark on my linux machine and i have simple python web server running on localhost:8080 I am capturing only local port 8080. When i open browser on localhost:8080 wireshark captures ...
0
votes
2answers
205 views

log server setup and testing, with log manager opensource

I've been trying to get a new, centralized, log-server up and running for some testing and have run into some problems. First part is that I've installed Kibana but can't get anything indexed, tried ...
0
votes
2answers
149 views

How can I scan using nmap and Zenmap all hostnames that begin with a particular string?

I have a number of nodes on a couple of networks whose hostnames all start with org. Some examples are: orgwebsvr1 orgwebsvr2 orgwebsvr3 orgdbsvrmysql orgdbsvrmssql orgdbsvrosql With nmap, I know ...
0
votes
1answer
187 views

tell tcpdump to not include the port numbers in the output

how can tell tcpdump to not include the port numbers in the output? Right now it includes the resolved IP + resolved port. I just need the resolved IP address (hostnames)
3
votes
1answer
100 views

How do I get the network usage of a server per-IP?

I'd like to know a tool to programmatically measure, in KB/s, the load that each IP applies to a server. So far, tcpdump does a good job at telling me the amount of packets sent per second, but I ...
0
votes
1answer
224 views

monitoring rx/tx stats of current connections on Linux

In a Linux netfilter router, connections table only includes information on end of connections. Where I reach real time rx/tx information for each connection? (In freebsd, session table already ...
0
votes
1answer
117 views

Linux measure network bandwith

I have a one way connection between 2 computers (both Ubuntu). I am looking for an easy way to find the max bandwith. I need to find the max transfer rate between computer A and computer B without ...
-1
votes
1answer
303 views

What options do I have for monitoring internet usage by user and sites [closed]

I want to set up a linux server (ubuntu server 12.04) on my home network to monitor the internet usage and find out the users and websites that use the most bandwidth. I have looked at squid and it ...
3
votes
1answer
257 views

How to find the reason for a weekly downtime on an Ubuntu web server hosted by AWS?

We started monitoring our web server using Pingdom and found out that we have a downtime of a few minutes every Sunday at 0:00 UTC. The test runs every minute and checks if a successful HTTP response ...
-6
votes
3answers
51 views

Does apache log client IPs [closed]

Does apache log client IPs per request by default? If not, what are some common ways to do this?
2
votes
1answer
183 views

How to Monitor and Log Port Usage and Destination Attempts of a local computer from a Linux Gateway?

I have access to a linux server that is acting as the gateway to an internal network. There is a MagicJack Plus device plugged into this network via CAT5. The MagicJack gets its ip via DHCP from the ...
5
votes
2answers
154 views

Aggregating NICs for receive only connections on Linux

I am setting up a network monitoring system on RedHat 6 that will be receiving the packet feed from an inline tap. One of the functions of this device will be running Snort. Putting two NICs in the ...
0
votes
1answer
53 views

gather information about packet from malicious ip

I have a glassfish server running some webservice and I noticed that there is an abnormal traffic from japan (150.70.x.x) in my iptables log file and I dont have any user in this country . Until now ...
2
votes
1answer
140 views

Linux NetSec/IDS Bridge

What I am looking to make is a linux system that acts as a bridge. It simple forwards any data sent on one device over to the next device. It does not attempt to block incoming attacks or redirect any ...
0
votes
1answer
88 views

Finding all network addresses associated with a given hostname

Scenario: a server is multi-homed to a variety of networks (perhaps it is a jump box) DNS has the hostname registered only on one network (the management interface, perhaps) Problem: without ...
1
vote
1answer
414 views

ngrep output when monitoring linux network activity

I'm trying to connect to a remote device (which connect to my server on port 31200 via TCP) and while troubleshooting with ngrep I'm getting the following: T(6) 2012/02/21 00:26:25.817525 ...
1
vote
3answers
460 views

Linux: grep-able monitoring of network traffic and number of connections

I need to collect certain monitoring data every minute and send it to a monitoring server. The source of that data must be parseable using standard Linux tools. For example, to monitor number of ...
0
votes
3answers
373 views

Strange network traffic on my dedicated server. How to find out what is causing it

I noticed a trange outgoing traffic in my dedicated server. I'd like to know how could I find out what is the reason to this. One day traffic One week traffic As you can see, there are bursts of ...
3
votes
3answers
3k views

Advanced traceroute tool for Linux

Is there comparable alternative for PingPlotter Pro on Linux? I'm looking for traceroute tool that has ability to display traceroute data of each nodes along the route in nice timeline graph.
1
vote
3answers
607 views

Unix software to continuously monitor packet loss

I'm looking for some software to monitor packet loss or packet retries. Preferably something that continuously monitors vs. a testing approach and preferably free. My server's OS is debian. I'm ...
22
votes
5answers
22k views

How passively monitor for tcp packet loss? (Linux)

How can I passively monitor the packet loss on TCP connections to/from my machine? Basically, I'd like a tool that sits in the background and watches TCP ack/nak/re-transmits to generate a report on ...
11
votes
5answers
5k views

On Linux, how can I tell which process is sending Ethernet packets?

I'm running gkrellm which shows that some process on my Debian Linux system is writing approx 500KB/s to eth0. I'd like to find out which process it is. I know a little bit about netstat, but it ...
2
votes
1answer
297 views

Embedded device for deploying network probes

Our environment has a multitude of remote subnets that we monitor by deploying Linux-based probes running various network monitoring software and other handy tools. Currently we're using surplus-ed ...
1
vote
2answers
273 views

Monitoring instantaneous network throughput at one second intervals?

For a testing setup I have, I need to monitor the throughput through a "router"* at regular intervals of around 5 seconds or less (sub-second intervals would be very nice, but not required). Ideally, ...
2
votes
3answers
152 views

Looking for a host based network monitor solution

Hi all! Problem So, my hosting company has a network usage graph for my dedicated server. It seems that one day earlier this month, my network usage suddenly spiked with several hundred megabytes ...
1
vote
1answer
440 views

Linux network connections logging

I have linux (OpenSuse) testing server and I would like to have detail log about http and ftp connections (and maybie other TCP connections). Informations I'm interested in are IP address, transfer ...
4
votes
1answer
226 views

“Enterprise Monitoring Solution” with the lightest agent?

I have a network of disparate remote VPS / "cloud" / colocated servers that I would like to monitor from a central location, using open source software like ...
0
votes
1answer
368 views

internet connection monitor

I am looking for a tool to check my internet connection (by pinging something and/or retrieving a web page) and when the connection is lost to execute some command (sending an e-mail, resetting my ...
2
votes
1answer
903 views

How to monitor current output/receive queue length in Linux

I want to check the capacity and performance of my network. Besides checking the txkB/s and rxkB/s via Sar, I'd also like to see the average queue length of the network interface(so that the average ...
0
votes
2answers
96 views

monitoring a /21 for potential bad guys with snort and port mirroring

I want/need to start monitoring our network a bit better. Its an odd network in that it comprises 2 /22 public IPs and a slew of private admin IPs. I do have one point in the network where it all ...
0
votes
3answers
783 views

PacketFence Installation?

So I've stumbled across PacketFence during my search for a decent Network Access Control system. After doing a little research about it's capabilities I've come to realize it's meets all the ...
2
votes
1answer
124 views

Show bytes transfered on an active connection

Is it possible to show bytes transfered over time in real-time on an active connection on the command line? I can do netstat and get the bytes at that time, but wonder if it can be adapted to show ...
0
votes
5answers
2k views

How can I monitor network performance in Linux? [closed]

I am managing a network with a Linux server (CentOS 5.4) and Windows XP Clients. Recently I have become concerned about network performance and would like to begin monitoring it. Is it possible to ...
0
votes
2answers
187 views

How To Perform Distributed Website Monitoring?

I would like to know how sites like the following perform distributed website monitoring (from multiple checkpoints/countries). pingdom.com, site24x7.com, uptrends.com, siteuptime.com, etc, etc. To ...
0
votes
4answers
179 views

Linux: Measuring network consumption per remote host

Is there a way to measure the network consumption to a specific IP port. I am running 2-3 process with multiple threads which connect to a remote server and I need to know the exact used network ...
0
votes
1answer
113 views

VNSTAT only giving stats for the month of June

I MUST be overlooking something here. The date and time are set correctly on my machine, but VNSTAT only shows stats for the month of June (vnstat -m). Everything is updated and appears to be ...
4
votes
11answers
2k views

Open Source Linux network analyzer

Open Source Linux network analyzer Which are there? What features do they offer?
1
vote
2answers
112 views

network diagnostics and output to csv

I'd like to know what people are using on *nix to gather output for network traffic, diagnostics, discovery. I know this is a pretty broad question but My immediate goal here is to be able to gather ...