The tag has no usage guidance.

learn more… | top users | synonyms

0
votes
0answers
16 views

SSL_Stripping/SSL_Interception with OpenSource Software [on hold]

in my day job I work quite a lot with solutions to intercept and decrypt SSL traffic (mostly bluecoat software). I plan to do something the like in my home network but bluecoat systems are a bit ...
0
votes
0answers
7 views

Best Tool to make Graphs from ncap files [closed]

I am using WireShark to capture the network traffic. I am saving it in ncap files. I need a tool that allows me to compare the usage of each user from the network. There is some software tool that ...
2
votes
0answers
20 views

Monitor Internet Traffic Based on MAC Addresses [migrated]

I have a limited ADSL connection in my house. I want to monitor how much traffic each device connected to my router is using. I use a D-Link DSL-2730U as router. As far as I know there is no custom ...
0
votes
2answers
16 views

OpenVPN solution/options for traffic reduction?

I am looking into VPN for the purpose of traffic reduction on the client side. CPU load is secondary. Is lzo good enough to beat the overhead malus? Are there other options to tune compression in ...
2
votes
2answers
109 views

Potential traffic issues on one big(ger) subnet

Posts like this: Most traffic in a corporate LAN is client to server nowadays, and a router not very well setup rather becomes a bottleneck AND a SPOF. and 200+ clients on a subnet wasn't a ...
0
votes
1answer
23 views

What are the tools needed to best asses a load balancer?

I'm building a Paas with Docker container in the field of Networkf Function Virtualization. I need to deploy some load-balancers inside containers. I need to asses the load balancers in differents ...
-1
votes
1answer
39 views

Random spikes of high ingress traffic. What could be the cause? [closed]

I understand that this is rather a generic question but wanted to see if you all could offer some good feedback. Our business has three locations, one in the West Coast, two in the East Coast. Our ...
0
votes
0answers
136 views

HowTo: OpenWRT routing/tunneling all traffic through an inline Snort sensor

I want all traffic that hits the OpenWRT router redirecting/ tunnelin through a dedicated Snort/Suricata machine, before it leaves the local network. The Snort/Suricata machine should act as an inline ...
1
vote
1answer
115 views

High suspicious traffic + connection slow and disconnecting on VPS

I have a problem with my VPS hosted by OVH in France: I have a high traffic. If I look at ifconfig it gives: eth0 Link encap:Ethernet HWaddr XXXX ... ... ... RX ...
1
vote
2answers
69 views

Clients phone provider claiming high latency over UDP, how do I test?

A client of our uses a hosted phone solution for his 50 agent call centre. They use a hosted dialer who make the out going calls, once the connection is made the call is passed to my clients user ...
4
votes
1answer
148 views

Incredibly high peak of traffic (Network In) on AWS [closed]

I've found something extremely werid on my EC2 instance today; a peak on the "Network In" that goes beyond anything that had happened before, as you can see in the screenshot. Any idea about how to ...
0
votes
1answer
186 views

Spam Traffic, DDOS Attack & Server Crashing

I am running phpfox application in my server under my main domain name fetlock.com and I am getting large amount of spam and also suffering from DDOS attacks from multiple IP addresses. My server ...
-1
votes
2answers
92 views

Suspect traffic from 185.0.0.0/8 [closed]

I have a server/gateway running Debian 7. There is a big incoming traffic (for a homemade server) from an ip address located at 185.0.0.0/8 network for more than 40k packets in 24h. I have blocked all ...
0
votes
1answer
423 views

how to forward all traffic on specific interface to ip address

I have one Linux machine that have 2 interfaces. The first one is used as a default one and provides access to internet, the second interface was added as a dedicated link to send packets from tcpgen ...
0
votes
7answers
2k views

Is it possible to redirect/bounce TCP traffic to an external destination, based on rules?

I'm not even sure if this is possible... Also, please forgive my ignorance on the subject. What I'm looking for is for "something" that would allow me to redirect all TCP traffic arriving to host A ...
0
votes
1answer
270 views

network gateway can't see traffic for monitoring

I've just setup a new CentOS 6.4 machine to act as a default gateway for the LAN at head office. It's primary task is simply to route traffic to the appropriate place, ie VPN servers or the firewall ...
3
votes
4answers
2k views

How do I get the number of (currently) established TCP connections for a specific port?

How do I get the number of (currently) established TCP connections for a specific port? I have managed to get counters for traffic working by doing i.e for outgoing RTMP. iptables -N $CHAIN ...
2
votes
6answers
626 views

Wireshark Capture Between Two Routers

How would one go about capturing OSPF traffic in Wireshark between two routers? I'm looking to do something like this: [RTR A] - - - [LAPTOP] - - - [RTR B]
0
votes
0answers
186 views

iptables configuration to block unwanted traffic on specific MAC addresses

I want to block all Skype,Facetime, VOIP traffic on a MAC address. My approach is to block all ports from 450 to 65535 and this is my commandline: iptables -A INPUT -p tcp -destination-port 450:65535 ...
0
votes
0answers
48 views

Imbalance between DNS query and response rates

The following figures shows the rate of UDP DNS queries and responses of a traffic passing a router. DNS query is a DNS packet with query/response flag set to 0 in header and DNS response the one with ...
-1
votes
1answer
237 views

How to test server under heavy network traffic? [closed]

I need to test our server infrastructure providing static content, under heavy traffic. I need to utilize 10GBps at minimum if our new CDN infrastructure is working correctly, or pinout bottlenecks. ...
7
votes
2answers
1k views

Varnish running out of open ports, lots of SYN_SENT connections

Recently we've been experiencing issues with our Varnish (3x) -> Apache (3x) setup, resulting in a huge spike in SYN_SENT connections. The spike itself is due to the amount of new traffic hitting the ...
-1
votes
2answers
408 views

Network bandwidth requirements for a one-way Active Directory trust

I am considering establishing a one-way trust relationship between a local Active Directory domain and a remote (across a WAN VPN) Active Directory domain. Since the bandwidth between sites is ...
0
votes
1answer
146 views

Capture traffic on web server

I have a web server that is accepting web service calls on port 8081 - I want to see the packets coming through. I tried using fiddler, but it doesn't see anything. I don't have access to the code, ...
-1
votes
2answers
478 views

Tool to analyze the real time traffic in Windows XP SP2 [closed]

My client machine/(s) is/(are) Windows XP SP2. I can’t effort every time to have physical access to my server machine. To analyze the real time traffic and bandwidth between client and server machine, ...
1
vote
3answers
1k views

Find whats using all my servers bandwidth

TLDR: how can I dig deeper into my Mac mini OSX server to determine what processes are consuming so much bandwidth, or where all the inbound traffic is coming from? Resource caching is on, all ...
0
votes
2answers
948 views

Monitor incoming TCP/UDP flood attack and graph it

I'm preparing a presentation on a security issue and want to include a demonstration. It won't be in real time, I just need to show some pictures of the results. I have some VPSes that will perform ...
2
votes
0answers
430 views

curl request results in heavy load on the server

We consume an XML Datafeed by sending cURL requests to the provider's server. They do not allow us to cache, so each pageview is a new cURL request. Twice this year, our server has crashed with the ...
0
votes
1answer
338 views

Python: how to calculate data received and send between two ipaddresses and ports [closed]

I guess it's socket programming. But I have never done socket programming expect for running the tutorial examples while learning Python. I need some more ideas to implement this. What I specifically ...
2
votes
2answers
131 views

Calculate data transferred in a local LAN

How do you calculate the data flown between a computer and the gateway computer. I have a Linux router/gateway running IP Tables which routes internet traffic in a LAN. I have individual users with ...
0
votes
2answers
492 views

capture nimbuzz traffic

I need to capture all the traffic, specially during login, between nimbuzz pc client and nimbuzz server. The reason is that i need to debug outgoing packets at login that mark the user visibility ...
0
votes
3answers
4k views

Windows 2008 R2 network traffic logging

Can you advise me a network traffic logger for Windows 2008 R2? It expected to be executed as service and gather simple data "source ip/port, dest ip/port, packets size". I have tried to use ETW ...
1
vote
1answer
560 views

How to measure network traffic round trip delays and jitter

I am hoping someone may point me in the direction. I would like generate some network traffic between two endpoints and measure the delay, jitter and packet loss along the path. Could some please ...
3
votes
3answers
1k views

Network traffic generator / simulator

Does anyone know of a traffic generator that can generate or simulate network traffic for example http, ftp, smtp, instant messaging and voice plus video over IP traffic. I need the different traffic ...
3
votes
4answers
898 views

What tools should I use to assess bandwidth for web server farm..?

I'm contemplating moving datacentre and I need to know the size of pipe I'll need in order to get a quote. Currently I'm charged on GBs of traffic per month (currently about 42GB inbound - so ...
0
votes
4answers
308 views

How to determine the cause of high resource usage for two hours last week?

I know there are several tools I can use to find out what's causing heavy network and CPU usage right now, but every so often on my server I'll check the logs and notice that there were periods of ...
1
vote
1answer
477 views

Can't see traffic in my guest OS with tcpdump

I've created a virtual machine (Centos 6.0) using QEMU/KVM, which is also running on a Centos 6.0. The virtual machine is configured to have two NICs. The first NIC is using a bridged network (eth0 of ...
11
votes
3answers
4k views

Check incoming network traffic in real time?

Is there a way I can monitor incoming network traffic in real time on my server? Preferably in terms of *bps Running Ubuntu
1
vote
2answers
119 views

256k speed connection to host multiple users

I've been given a 256k modem for a 2 day event to allow users access to the internet. There will be multiple connections (I anticipate 30+). How can I set this up so that it can support that many ...
0
votes
3answers
68 views

How can I track which page is being requested using multiple VirtualHost in Apache?

I have an Apache 1.3 web server configured with several VirtualHost entries that serves multiple independent websites. At certain times Apache receives a huge amount of request, which causes the ...
0
votes
2answers
187 views

SYN packets sent from one server but never arrives at destination

I am troubleshooting network problems for a client, remotely. The problem they have is that they get "connection timed out" occasionally between a web server and and a back-end search server. They can ...
1
vote
1answer
154 views

Detecting a host doing a port sweep across multiple interfaces/networks

I'm trying to set up a honey-pot like machine that would detect port sweeps from multiple networks with multiple interfaces. As an illustration, if I could set up a box with eth1, eth2 and eth3. ...
4
votes
1answer
1k views

How to reproduce http traffic of a real site in another environment (e.g. VM)

There is a bug in my web application which I cannot reproduce. All the logs look ok or at least I cannot see anything unusual. But it happens. So I thought I could record all the traffic to/from my ...
0
votes
1answer
89 views

How to stop a traffic capture?

I have created a topology on GNS3. I started a capture with the command - capture R5 f0/0 ping.cap How do I stop the capture?
-3
votes
3answers
128 views

Measure ip/port traffic [closed]

We have a small data center here in Brazil to host our servers. Now we are planing to provide some colocation and VPC hosting, and we need to measure monthly traffic of each ip/port. We can't to ...
-1
votes
4answers
157 views

Access Application Server from internet

I have Suse server running on one of my lan machines ,localhost, and it is running Websphere application server. I am also running an http apache on the same machine. I have configured my wireless ...
0
votes
3answers
338 views

What network traffic is viewable when connecting over ssh?

If I connect to a server via SSH, what network traffic is viewable to someone monitoring the network? For example, if I'm at work and connect to a server via SSH, what can the network admins see? Do ...
0
votes
2answers
297 views

Can a network patch pannel affect network throughput?

In our office we have a gigabit LAN driven by Netgear ProSafe switches. I am trying to increase our throughput and am wondering if some of our patch panels could use an overhaul. I don't see any sort ...
1
vote
2answers
415 views

What does port number14443 signify? [closed]

In an internet traffic measurement it is seen that port 14443 carries a large amount of traffic. What exactly is this port? and what can be the explanation?
15
votes
4answers
35k views

How can I filter https when monitoring traffic with Wireshark?

I want to observe the HTTPs protocol. How can I use a Wireshark filter to do that?