Describes the use of a system that constantly monitors a computer network for slow or failing components and that notifies the network administrator (via email, SMS or other alarms) in case of outages.

learn more… | top users | synonyms

13
votes
5answers
24k views

Is there a way to get wireshark to capture packets sent from/to localhost on Windows?

Is there a way to get wireshark to capture packets sent from/to localhost? When I monitor traffic going from my computer to another, or from another computer to my computer, then it works. But ...
0
votes
2answers
39 views

How to log all inbound connections on Windows server

I need to log a summary of all inbound TCP connections on a Windows 2008R2 server, but only including the Source IP, Source Port, Destination IP and Destination Port. I do not want to log the payload ...
-2
votes
3answers
61 views

Is there a GUI tool to log and view outgoing CURL requests from a Linux server? [duplicate]

I've seen several similar questions - but none that truly answer the question. So here goes: PROBLEM: A script is being run on one of our servers that is making outgoing post (and other) requests ...
2
votes
0answers
20 views

Monitor Internet Traffic Based on MAC Addresses [migrated]

I have a limited ADSL connection in my house. I want to monitor how much traffic each device connected to my router is using. I use a D-Link DSL-2730U as router. As far as I know there is no custom ...
1
vote
1answer
29 views

How to set up an end-to-end SNMP data collection system to cloud?

Aim: We are creating a cloud server which will collect diagnostic data (like bytes exchanged, SNR) from remote SNMP enabled network devices (like Routers, Switches). The SNMP devices may be located ...
2
votes
1answer
1k views

Detailed statistics using Ubiquiti UniFi hardware

I'm using UniFi manager to manage 10+ sites with 3-5 hotspots per site, and I look for more detailed statistics that the one offered by UniFi manager, such as: following an user through different ...
0
votes
3answers
54 views

Use Nagios to monitor 2 locations

As I am new to Nagios, I would like to ask if anyone knows how to monitor 2 physical locations using Nagios. So for example, we are having 2 datacenters which are interconnected. I have set-up a ...
29
votes
5answers
39k views

How passively monitor for tcp packet loss? (Linux)

How can I passively monitor the packet loss on TCP connections to/from my machine? Basically, I'd like a tool that sits in the background and watches TCP ack/nak/re-transmits to generate a report on ...
0
votes
0answers
41 views

How to monitor network activity in openwrt

I'm having what feels like slow internet from time to time, with ping to google.com at 3000ms and up or even timeouts, and I'd like to check if the problem comes from the ISP or if it's from my ...
12
votes
5answers
9k views

On Linux, how can I tell which process is sending Ethernet packets?

I'm running gkrellm which shows that some process on my Debian Linux system is writing approx 500KB/s to eth0. I'd like to find out which process it is. I know a little bit about netstat, but it ...
2
votes
0answers
34 views

Network sensor for a TCP connection for collecting statistics each second [closed]

I need a Network Sensor capable to gather basic end-to-end statistics (packet loss, jitter and network delay/RTT) of several TCP connections directed to the very same destination (ip-addr:port) on ...
15
votes
4answers
35k views

How can I filter https when monitoring traffic with Wireshark?

I want to observe the HTTPs protocol. How can I use a Wireshark filter to do that?
1
vote
2answers
668 views

Icinga 2 vs Nagios 4 vs Shinken 2 : is there Performance Benchmarking comparison available?

I am not able to find out any link that displays the benchmarking report for the cores. We have to monitor 50,000 hosts and 30 services per host per minute host check : icmp per 5 minute service ...
2
votes
1answer
220 views

Monitor network statistics with vnstat on CoreOS?

I notice that vnstat isn't installed on CoreOS. Is there a comparable way to monitor network usage on a CoreOS cluster? Certainly one could run vnstat through a Docker container but I assume that ...
5
votes
5answers
11k views

How to capture Wireshark packets when using a switched network in Windows

I’ve been asked by our SIP trunk provider to run a Wireshark trace on the network when we receive calls. The issue I’m having is that if I run Wireshark from a laptop plugged into the main switch I ...
5
votes
3answers
861 views

Network Sniffing and Hubs

This will likely seem naive to the experts... but it has been on my mind lately. For years I've been using ntop and a cheap 4 port hub to sniff client networks to determine who's doing what -- and ...
1
vote
1answer
91 views

Automatic Node Categorization not working in OpenNMS

I setup a Node Categorization policy in the foreign source definition ; its not working correctly what changes need to be done? Text version: (for bot/crawler) name SetNodeRouter class ...
0
votes
0answers
134 views

Zabbix active check traffic

My conundrum is as follows... I have a Zabbix (2.2) server and agent up and running. The server does all kinds of passive check on the agent -- everything here is working as intended. The problem is ...
0
votes
0answers
11 views

How to make TCPFlow to not store package body?

Is it possible to configure tcpflow to store only package headers without package body? My log simply explodes in production.
1
vote
2answers
127 views

Count number of DNS (bind9) clients?

I need to know the number of my DNS server clients. Probably it means unique IP's per day, or something, because i think there is no other way to identify clients in other way. So, i need to know how ...
10
votes
5answers
6k views

Solution to route/proxy SNMP Traps (or Netflow, generic UDP, etc) for network monitoring?

I'm implementing a network monitoring solution for a very large network (approximately 5000 network devices). We'd like to have all devices on our network send SNMP traps to a single box (technically ...
1
vote
1answer
575 views

Implementing Argus (similar to netflow) what kind of information should I be gathering?

I am setting up a trial of Argus at my company as a diagnostic tool. We have a collector box attached to a monitoring port on our switch, and the initial plan is to redirect ports with unusual traffic ...
1
vote
0answers
33 views

Is it reasonable to use an external website as a health check

I have a 4 proxy servers spread across a couple of datacentres that serve a large number of users on a WAN. These are load balanced using an F5 GTM located at each site. My goal is to write a health ...
0
votes
0answers
56 views

iptables command to get bytes used by specific ip on port 443

I have hosted a WiFi network and i need to monitor data usage by every IP address on port 443(https) Here is the iptables rule used to share INTERNET from eth0 to wlan0 sudo iptables -t nat -A ...
0
votes
0answers
43 views

Find any/first alive host in subnet

I'm trying to find a quick way to check if there are ANY alive hosts in an IP range by pinging them. eg: i don't need to know what hosts are alive, just if one or more is responding to a ping. This ...
0
votes
0answers
57 views

Snort sniffing WPA1/2 protected network with mon0 (=wlan0; set into monitor-mode)?

How do I configure Snort to sniff a WPA2-protected network using mon0 (= wlan0; set into monitor-mode). Of course, I have the SSID, the WPA-PSK and channel of the wifi-network I want to monitor with ...
0
votes
0answers
76 views

IPtraf doesn't work with venet devices

I've got a VPS with Debian 7 Wheezy 64 bit. I installed the tool iptraf to monitor the network usage, but it seems that it doesn't work whit the device type "venet". So i lunched the command with the ...
0
votes
1answer
397 views

How to have PRTG Server running beside Apache? [duplicate]

We used to work with a local Apache instance (WAMP) as a development environment, but we installed recently a PRTG server on the same machine, so it listens to the same port, as it is a web-based ...
6
votes
4answers
2k views

Open source DCIM stack?

Our 500-server data center is growing quickly and my manager has started investigating using a specialized Data Center Infrastructure Management (DCIM) package to help manage constraints. DCIM ...
2
votes
2answers
285 views

Monitor network traffic/usage by PORT

I apologize in advance if this is out of topic. I am currently using Icinga and Cacti to monitor machines and the network respectively. While I have no big issues with this setup, I would really like ...
0
votes
1answer
221 views

How do I bond eth0 to failover to wlan0 after WAN connection loss?

I would like to have my monitoring box (Zenoss) notify me when the network upstream of me goes down without an actual link loss. I have had some issues with our CoLo's switches going down, but I ...
-3
votes
1answer
54 views

What does unknown connection state mean [closed]

When using a port monitor, I noticed that the states of some of the connections where categorized as "unknown". What does this mean?
0
votes
1answer
42 views

Keep showing old processes in nethogs

Nethogs stops showing idle processes after a while. How can I make it keep showing them? I want to have a complete history of processes for long time. Is there any alternative to nethogs?
2
votes
1answer
75 views

Correlating network issues with severe weather?

Our helpdesk is noticing that many network issues are associated with medium to sever weather at some of our regional locations. Now this has been escalated to L3, I do see a correlation between ...
6
votes
1answer
292 views

Devices with MAC's manufacturer section “00:FF:01”?

While monitoring my office's network, I have seen a huge amount of traffic coming from devices whose MAC address manufacturer part (the three most significant octets) is 00:FF:01 I can't see the ...
0
votes
0answers
119 views

Slow Tableau server performance in a datacentre

I'm installing Tableau Server 8.3 in our hosted datacenter and experiencing strange behavior. When I run a workbook on my ( average) laptop (8GB, 4 cores, SSD) in Tableau client, it runs in about 10 ...
0
votes
0answers
270 views

iptables on AWS - how to get traffic mirroring to work?

Has anyone successfully deployed 'iptables -t mangle -j TEE...' for monitoring traffic on AWS instances? If so, how? My objective is for client<->server traffic between external customers and EC2 ...
1
vote
2answers
786 views

OSS Server Monitoring Software — Which is right for me? [duplicate]

I'm trying to plot the course for my organization and am currently looking at (not exclusively so, but so far research leads to these): Zenoss Nagios OpenNMS Our requirements is that this must be ...
0
votes
0answers
71 views

Trace IP traffic to physical machine under Linux

In my firewall logs I recently see frequent connection attempts from a 10.0.0.0/8 network. This network is used by VirtualBox, but I can exclude that these packets come from those. No physical machine ...
0
votes
2answers
109 views

Monitor server / website load of bandwith

I've been doing a lot of searching around for a tool to monitor a website's "bandwidth" usage, and I'm not talking about how many MB/data is being loaded but the servers actual output speed, to ...
0
votes
1answer
273 views

Monitoring “external” worm activity remotely

Some of our computers in our company has been infected with the worm Conficker. We don't know the source of the infection, but I want to monitoring the outside activity to see if we are still infected ...
1
vote
2answers
884 views

Using runit and monit to run / monitor services

I am configuring some services to run on Ubuntu server. I was going through the link below where they use runit to run the services and monit to monitor the services - ...
0
votes
2answers
3k views

How Fortigate 100D send log to Splunk

I have a Fortigate 100D with FortiOS 5.06 , this is my setting config log syslogd setting set status enable set server “192.168.7.4″ set reliable disable set port 515 set csv disable set facility ...
0
votes
2answers
188 views

Is there any software to monitor bandwidth?

In our organization we have 3 servers that are located at the office and around 20 pc accessing the servers in the warehouse with distance between the pc and the server around 20 km (13 miles). Our ...
2
votes
1answer
1k views

SonicWall TZ 200 Network bandwidth or usage monitoring

I was using Pfsense for a while and recently replaced it with SonicWall TZ200. What I miss now is a Bandwidth or usage monitoring like BandwidthD to monitor IP wise traffic. How can I do this ...
0
votes
1answer
141 views

nmap repeats the scan to a specific port multiple time

I scanned a subnet (16 hosts) while dumping the network traffic with wireshark. I did it 2 times and I noticed that in the traffic there is the normal SYN-SYN/ACK and SYN-RST from open/closed port, ...
3
votes
3answers
2k views

OpenBSD has open ports in default installation

I have been considering replacing Ubuntu with OpenBSD to improve the security on my local server. I need to have ssh access to it, and I also need it to serve static web content - so the only ports I ...
0
votes
0answers
112 views

Randomly lose the connection to router

I have been suffering with in this problem for a really long time and I'm running out of ideas. We have VMWare (Intel model server, Intel storage - Windows storage op. system, ). In the virtual ...
0
votes
1answer
251 views

How to monitor socket connection usage and exhaustion on a server?

I have a service endpoint (java) that will be getting bursts of thousands of requests per second. In my load testing I had to tweak the server because I would run out of open sockets as there were ...
0
votes
1answer
400 views

Show units when doing dstat -n

Question is simple as, when i do dstat -n i get what I assume to be a unit in bytes? But i would like a way to force the units into Mb/s or for it to simply tell me the unit it is displaying. Is there ...