The tag has no wiki summary.

learn more… | top users | synonyms

0
votes
0answers
15 views

Find malicious file sending traffic [duplicate]

I'm helping someone with their server. They have 10 websites on the server, it's running Windows Server 2012 and IIS 8. They have three Wordpress sites, and I'm guessing one of them was hacked. ...
1
vote
1answer
33 views

High suspicious traffic + connection slow and disconnecting on VPS

I have a problem with my VPS hosted by OVH in France: I have a high traffic. If I look at ifconfig it gives: eth0 Link encap:Ethernet HWaddr XXXX ... ... ... RX ...
0
votes
0answers
48 views

Do intrusions cause huge network traffic [on hold]

I've noticed many times with different cloud providers rackspase and windows azure a huge sudden spike in outgoing traffic 200 GB - 600 GB within 1-4 days !! knowing those machines draining network ...
0
votes
0answers
19 views

Clients phone provider claiming high latency over UDP, how do I test?

A client of our uses a hosted phone solution for his 50 agent call centre. They use a hosted dialer who make the out going calls, once the connection is made the call is passed to my clients user ...
4
votes
1answer
77 views

Incredibly high peak of traffic (Network In) on AWS [closed]

I've found something extremely werid on my EC2 instance today; a peak on the "Network In" that goes beyond anything that had happened before, as you can see in the screenshot. Any idea about how to ...
0
votes
1answer
109 views

Spam Traffic, DDOS Attack & Server Crashing

I am running phpfox application in my server under my main domain name fetlock.com and I am getting large amount of spam and also suffering from DDOS attacks from multiple IP addresses. My server ...
-1
votes
2answers
72 views

Suspect traffic from 185.0.0.0/8 [closed]

I have a server/gateway running Debian 7. There is a big incoming traffic (for a homemade server) from an ip address located at 185.0.0.0/8 network for more than 40k packets in 24h. I have blocked all ...
0
votes
1answer
320 views

how to forward all traffic on specific interface to ip address

I have one Linux machine that have 2 interfaces. The first one is used as a default one and provides access to internet, the second interface was added as a dedicated link to send packets from tcpgen ...
0
votes
6answers
1k views

Is it possible to redirect/bounce TCP traffic to an external destination, based on rules?

I'm not even sure if this is possible... Also, please forgive my ignorance on the subject. What I'm looking for is for "something" that would allow me to redirect all TCP traffic arriving to host A ...
0
votes
1answer
189 views

network gateway can't see traffic for monitoring

I've just setup a new CentOS 6.4 machine to act as a default gateway for the LAN at head office. It's primary task is simply to route traffic to the appropriate place, ie VPN servers or the firewall ...
3
votes
4answers
899 views

How do I get the number of (currently) established TCP connections for a specific port?

How do I get the number of (currently) established TCP connections for a specific port? I have managed to get counters for traffic working by doing i.e for outgoing RTMP. iptables -N $CHAIN ...
2
votes
6answers
405 views

Wireshark Capture Between Two Routers

How would one go about capturing OSPF traffic in Wireshark between two routers? I'm looking to do something like this: [RTR A] - - - [LAPTOP] - - - [RTR B]
0
votes
0answers
149 views

iptables configuration to block unwanted traffic on specific MAC addresses

I want to block all Skype,Facetime, VOIP traffic on a MAC address. My approach is to block all ports from 450 to 65535 and this is my commandline: iptables -A INPUT -p tcp -destination-port 450:65535 ...
0
votes
0answers
46 views

Imbalance between DNS query and response rates

The following figures shows the rate of UDP DNS queries and responses of a traffic passing a router. DNS query is a DNS packet with query/response flag set to 0 in header and DNS response the one with ...
-1
votes
1answer
184 views

How to test server under heavy network traffic? [closed]

I need to test our server infrastructure providing static content, under heavy traffic. I need to utilize 10GBps at minimum if our new CDN infrastructure is working correctly, or pinout bottlenecks. ...
7
votes
2answers
820 views

Varnish running out of open ports, lots of SYN_SENT connections

Recently we've been experiencing issues with our Varnish (3x) -> Apache (3x) setup, resulting in a huge spike in SYN_SENT connections. The spike itself is due to the amount of new traffic hitting the ...
-1
votes
2answers
317 views

Network bandwidth requirements for a one-way Active Directory trust

I am considering establishing a one-way trust relationship between a local Active Directory domain and a remote (across a WAN VPN) Active Directory domain. Since the bandwidth between sites is ...
0
votes
1answer
119 views

Capture traffic on web server

I have a web server that is accepting web service calls on port 8081 - I want to see the packets coming through. I tried using fiddler, but it doesn't see anything. I don't have access to the code, ...
-1
votes
2answers
340 views

Tool to analyze the real time traffic in Windows XP SP2 [closed]

My client machine/(s) is/(are) Windows XP SP2. I can’t effort every time to have physical access to my server machine. To analyze the real time traffic and bandwidth between client and server machine, ...
1
vote
3answers
1k views

Find whats using all my servers bandwidth

TLDR: how can I dig deeper into my Mac mini OSX server to determine what processes are consuming so much bandwidth, or where all the inbound traffic is coming from? Resource caching is on, all ...
0
votes
2answers
748 views

Monitor incoming TCP/UDP flood attack and graph it

I'm preparing a presentation on a security issue and want to include a demonstration. It won't be in real time, I just need to show some pictures of the results. I have some VPSes that will perform ...
2
votes
0answers
338 views

curl request results in heavy load on the server

We consume an XML Datafeed by sending cURL requests to the provider's server. They do not allow us to cache, so each pageview is a new cURL request. Twice this year, our server has crashed with the ...
0
votes
1answer
266 views

Python: how to calculate data received and send between two ipaddresses and ports [closed]

I guess it's socket programming. But I have never done socket programming expect for running the tutorial examples while learning Python. I need some more ideas to implement this. What I specifically ...
2
votes
2answers
122 views

Calculate data transferred in a local LAN

How do you calculate the data flown between a computer and the gateway computer. I have a Linux router/gateway running IP Tables which routes internet traffic in a LAN. I have individual users with ...
0
votes
2answers
397 views

capture nimbuzz traffic

I need to capture all the traffic, specially during login, between nimbuzz pc client and nimbuzz server. The reason is that i need to debug outgoing packets at login that mark the user visibility ...
0
votes
3answers
2k views

Windows 2008 R2 network traffic logging

Can you advise me a network traffic logger for Windows 2008 R2? It expected to be executed as service and gather simple data "source ip/port, dest ip/port, packets size". I have tried to use ETW ...
1
vote
1answer
387 views

How to measure network traffic round trip delays and jitter

I am hoping someone may point me in the direction. I would like generate some network traffic between two endpoints and measure the delay, jitter and packet loss along the path. Could some please ...
3
votes
3answers
951 views

Network traffic generator / simulator

Does anyone know of a traffic generator that can generate or simulate network traffic for example http, ftp, smtp, instant messaging and voice plus video over IP traffic. I need the different traffic ...
3
votes
4answers
761 views

What tools should I use to assess bandwidth for web server farm..?

I'm contemplating moving datacentre and I need to know the size of pipe I'll need in order to get a quote. Currently I'm charged on GBs of traffic per month (currently about 42GB inbound - so ...
0
votes
4answers
255 views

How to determine the cause of high resource usage for two hours last week?

I know there are several tools I can use to find out what's causing heavy network and CPU usage right now, but every so often on my server I'll check the logs and notice that there were periods of ...
1
vote
1answer
356 views

Can't see traffic in my guest OS with tcpdump

I've created a virtual machine (Centos 6.0) using QEMU/KVM, which is also running on a Centos 6.0. The virtual machine is configured to have two NICs. The first NIC is using a bridged network (eth0 of ...
10
votes
3answers
3k views

Check incoming network traffic in real time?

Is there a way I can monitor incoming network traffic in real time on my server? Preferably in terms of *bps Running Ubuntu
1
vote
2answers
116 views

256k speed connection to host multiple users

I've been given a 256k modem for a 2 day event to allow users access to the internet. There will be multiple connections (I anticipate 30+). How can I set this up so that it can support that many ...
0
votes
3answers
66 views

How can I track which page is being requested using multiple VirtualHost in Apache?

I have an Apache 1.3 web server configured with several VirtualHost entries that serves multiple independent websites. At certain times Apache receives a huge amount of request, which causes the ...
0
votes
2answers
171 views

SYN packets sent from one server but never arrives at destination

I am troubleshooting network problems for a client, remotely. The problem they have is that they get "connection timed out" occasionally between a web server and and a back-end search server. They can ...
1
vote
1answer
144 views

Detecting a host doing a port sweep across multiple interfaces/networks

I'm trying to set up a honey-pot like machine that would detect port sweeps from multiple networks with multiple interfaces. As an illustration, if I could set up a box with eth1, eth2 and eth3. ...
4
votes
1answer
891 views

How to reproduce http traffic of a real site in another environment (e.g. VM)

There is a bug in my web application which I cannot reproduce. All the logs look ok or at least I cannot see anything unusual. But it happens. So I thought I could record all the traffic to/from my ...
0
votes
1answer
89 views

How to stop a traffic capture?

I have created a topology on GNS3. I started a capture with the command - capture R5 f0/0 ping.cap How do I stop the capture?
-3
votes
3answers
122 views

Measure ip/port traffic [closed]

We have a small data center here in Brazil to host our servers. Now we are planing to provide some colocation and VPC hosting, and we need to measure monthly traffic of each ip/port. We can't to ...
-1
votes
4answers
142 views

Access Application Server from internet

I have Suse server running on one of my lan machines ,localhost, and it is running Websphere application server. I am also running an http apache on the same machine. I have configured my wireless ...
0
votes
3answers
308 views

What network traffic is viewable when connecting over ssh?

If I connect to a server via SSH, what network traffic is viewable to someone monitoring the network? For example, if I'm at work and connect to a server via SSH, what can the network admins see? Do ...
0
votes
2answers
266 views

Can a network patch pannel affect network throughput?

In our office we have a gigabit LAN driven by Netgear ProSafe switches. I am trying to increase our throughput and am wondering if some of our patch panels could use an overhaul. I don't see any sort ...
1
vote
2answers
348 views

What does port number14443 signify? [closed]

In an internet traffic measurement it is seen that port 14443 carries a large amount of traffic. What exactly is this port? and what can be the explanation?
13
votes
3answers
23k views

How can I filter https when monitoring traffic with Wireshark?

I want to observe the HTTPs protocol. How can I use a Wireshark filter to do that?
-1
votes
2answers
1k views

How to view unencrypted Gtalk traffic? [closed]

A lot of tools allow us to view HTTPS traffic. Is there any tool out there which will decrypt TLS and allow me to see the network traffic for applications like Gtalk?
0
votes
1answer
594 views

High Email/Network Traffic on Server - SBS 2008

We have a Small Business Server 2008 box that is using up way too much internet traffic according to some very simple reports on our SonicWall TZ-210 router. The router shows that we have used 3 ...
0
votes
1answer
20 views

Will Windows transfer the files to the launching machine or not?

We have a "Server 1" which is located in "Location A". Next we have "Server 2" and "Server 3" which are located in "Location B". "Location B" "Server 2" ...
1
vote
1answer
126 views

IOS traffic-export equivalent for Junos

In IOS the traffic-export command allows you to take incoming packets and send them, unaltered, to a specific interface. Is there an equivalent way to do this in Junos? I've got a J-series 2350 here. ...
0
votes
1answer
1k views

HP-UX network traffic

Does HP-UX (11.31) has a command in order to check the current traffic (in bps) going through it's network card? Netstat -i only gives the I/O in terms of packets. We don't have a glance license, so ...
0
votes
3answers
456 views

IP/process based bandwidth usage stats tool for windows

I wanted to track which process in my windows OS is eating up my bandwidth. I've found similar question for Linux. The tool mentioned in this answer is available for linux only I think. Is there any ...