The tag has no wiki summary.

learn more… | top users | synonyms

0
votes
7answers
1k views

Is it possible to redirect/bounce TCP traffic to an external destination, based on rules?

I'm not even sure if this is possible... Also, please forgive my ignorance on the subject. What I'm looking for is for "something" that would allow me to redirect all TCP traffic arriving to host A ...
1
vote
2answers
40 views

Clients phone provider claiming high latency over UDP, how do I test?

A client of our uses a hosted phone solution for his 50 agent call centre. They use a hosted dialer who make the out going calls, once the connection is made the call is passed to my clients user ...
0
votes
0answers
15 views

Find malicious file sending traffic [duplicate]

I'm helping someone with their server. They have 10 websites on the server, it's running Windows Server 2012 and IIS 8. They have three Wordpress sites, and I'm guessing one of them was hacked. ...
1
vote
1answer
54 views

High suspicious traffic + connection slow and disconnecting on VPS

I have a problem with my VPS hosted by OVH in France: I have a high traffic. If I look at ifconfig it gives: eth0 Link encap:Ethernet HWaddr XXXX ... ... ... RX ...
3
votes
4answers
1k views

How do I get the number of (currently) established TCP connections for a specific port?

How do I get the number of (currently) established TCP connections for a specific port? I have managed to get counters for traffic working by doing i.e for outgoing RTMP. iptables -N $CHAIN ...
7
votes
2answers
899 views

Varnish running out of open ports, lots of SYN_SENT connections

Recently we've been experiencing issues with our Varnish (3x) -> Apache (3x) setup, resulting in a huge spike in SYN_SENT connections. The spike itself is due to the amount of new traffic hitting the ...
2
votes
3answers
2k views

Can tail slow down log writing speed on Linux (ext3)?

I'm wondering if tailf can generate blocking I/O which will slow down server responsiveness due to logging. For ex. assuming the following setup: Debian 5.1 linux server (foo) which is managed via ...
4
votes
1answer
104 views

Incredibly high peak of traffic (Network In) on AWS [closed]

I've found something extremely werid on my EC2 instance today; a peak on the "Network In" that goes beyond anything that had happened before, as you can see in the screenshot. Any idea about how to ...
0
votes
1answer
136 views

Spam Traffic, DDOS Attack & Server Crashing

I am running phpfox application in my server under my main domain name fetlock.com and I am getting large amount of spam and also suffering from DDOS attacks from multiple IP addresses. My server ...
13
votes
3answers
26k views

How can I filter https when monitoring traffic with Wireshark?

I want to observe the HTTPs protocol. How can I use a Wireshark filter to do that?
-1
votes
2answers
77 views

Suspect traffic from 185.0.0.0/8 [closed]

I have a server/gateway running Debian 7. There is a big incoming traffic (for a homemade server) from an ip address located at 185.0.0.0/8 network for more than 40k packets in 24h. I have blocked all ...
0
votes
1answer
338 views

how to forward all traffic on specific interface to ip address

I have one Linux machine that have 2 interfaces. The first one is used as a default one and provides access to internet, the second interface was added as a dedicated link to send packets from tcpgen ...
0
votes
1answer
211 views

network gateway can't see traffic for monitoring

I've just setup a new CentOS 6.4 machine to act as a default gateway for the LAN at head office. It's primary task is simply to route traffic to the appropriate place, ie VPN servers or the firewall ...
2
votes
6answers
478 views

Wireshark Capture Between Two Routers

How would one go about capturing OSPF traffic in Wireshark between two routers? I'm looking to do something like this: [RTR A] - - - [LAPTOP] - - - [RTR B]
0
votes
0answers
159 views

iptables configuration to block unwanted traffic on specific MAC addresses

I want to block all Skype,Facetime, VOIP traffic on a MAC address. My approach is to block all ports from 450 to 65535 and this is my commandline: iptables -A INPUT -p tcp -destination-port 450:65535 ...
0
votes
0answers
46 views

Imbalance between DNS query and response rates

The following figures shows the rate of UDP DNS queries and responses of a traffic passing a router. DNS query is a DNS packet with query/response flag set to 0 in header and DNS response the one with ...
-1
votes
1answer
192 views

How to test server under heavy network traffic? [closed]

I need to test our server infrastructure providing static content, under heavy traffic. I need to utilize 10GBps at minimum if our new CDN infrastructure is working correctly, or pinout bottlenecks. ...
-1
votes
2answers
348 views

Network bandwidth requirements for a one-way Active Directory trust

I am considering establishing a one-way trust relationship between a local Active Directory domain and a remote (across a WAN VPN) Active Directory domain. Since the bandwidth between sites is ...
0
votes
1answer
123 views

Capture traffic on web server

I have a web server that is accepting web service calls on port 8081 - I want to see the packets coming through. I tried using fiddler, but it doesn't see anything. I don't have access to the code, ...
-1
votes
2answers
372 views

Tool to analyze the real time traffic in Windows XP SP2 [closed]

My client machine/(s) is/(are) Windows XP SP2. I can’t effort every time to have physical access to my server machine. To analyze the real time traffic and bandwidth between client and server machine, ...
1
vote
3answers
1k views

Find whats using all my servers bandwidth

TLDR: how can I dig deeper into my Mac mini OSX server to determine what processes are consuming so much bandwidth, or where all the inbound traffic is coming from? Resource caching is on, all ...
0
votes
2answers
817 views

Monitor incoming TCP/UDP flood attack and graph it

I'm preparing a presentation on a security issue and want to include a demonstration. It won't be in real time, I just need to show some pictures of the results. I have some VPSes that will perform ...
2
votes
4answers
950 views

IP/host-based traffic grapher

Do you know/recommend any tool for graphing traffic based on IP or host? In this case, I will get a graph for every IP that passes through my gateway. Of course, I will use a predefined list of source ...
2
votes
0answers
361 views

curl request results in heavy load on the server

We consume an XML Datafeed by sending cURL requests to the provider's server. They do not allow us to cache, so each pageview is a new cURL request. Twice this year, our server has crashed with the ...
0
votes
1answer
283 views

Python: how to calculate data received and send between two ipaddresses and ports [closed]

I guess it's socket programming. But I have never done socket programming expect for running the tutorial examples while learning Python. I need some more ideas to implement this. What I specifically ...
2
votes
2answers
126 views

Calculate data transferred in a local LAN

How do you calculate the data flown between a computer and the gateway computer. I have a Linux router/gateway running IP Tables which routes internet traffic in a LAN. I have individual users with ...
0
votes
2answers
432 views

capture nimbuzz traffic

I need to capture all the traffic, specially during login, between nimbuzz pc client and nimbuzz server. The reason is that i need to debug outgoing packets at login that mark the user visibility ...
0
votes
3answers
3k views

Windows 2008 R2 network traffic logging

Can you advise me a network traffic logger for Windows 2008 R2? It expected to be executed as service and gather simple data "source ip/port, dest ip/port, packets size". I have tried to use ETW ...
3
votes
3answers
1k views

Network traffic generator / simulator

Does anyone know of a traffic generator that can generate or simulate network traffic for example http, ftp, smtp, instant messaging and voice plus video over IP traffic. I need the different traffic ...
1
vote
1answer
424 views

How to measure network traffic round trip delays and jitter

I am hoping someone may point me in the direction. I would like generate some network traffic between two endpoints and measure the delay, jitter and packet loss along the path. Could some please ...
3
votes
4answers
789 views

What tools should I use to assess bandwidth for web server farm..?

I'm contemplating moving datacentre and I need to know the size of pipe I'll need in order to get a quote. Currently I'm charged on GBs of traffic per month (currently about 42GB inbound - so ...
0
votes
4answers
269 views

How to determine the cause of high resource usage for two hours last week?

I know there are several tools I can use to find out what's causing heavy network and CPU usage right now, but every so often on my server I'll check the logs and notice that there were periods of ...
1
vote
1answer
387 views

Can't see traffic in my guest OS with tcpdump

I've created a virtual machine (Centos 6.0) using QEMU/KVM, which is also running on a Centos 6.0. The virtual machine is configured to have two NICs. The first NIC is using a bridged network (eth0 of ...
10
votes
3answers
3k views

Check incoming network traffic in real time?

Is there a way I can monitor incoming network traffic in real time on my server? Preferably in terms of *bps Running Ubuntu
1
vote
2answers
117 views

256k speed connection to host multiple users

I've been given a 256k modem for a 2 day event to allow users access to the internet. There will be multiple connections (I anticipate 30+). How can I set this up so that it can support that many ...
0
votes
3answers
67 views

How can I track which page is being requested using multiple VirtualHost in Apache?

I have an Apache 1.3 web server configured with several VirtualHost entries that serves multiple independent websites. At certain times Apache receives a huge amount of request, which causes the ...
0
votes
2answers
174 views

SYN packets sent from one server but never arrives at destination

I am troubleshooting network problems for a client, remotely. The problem they have is that they get "connection timed out" occasionally between a web server and and a back-end search server. They can ...
1
vote
1answer
149 views

Detecting a host doing a port sweep across multiple interfaces/networks

I'm trying to set up a honey-pot like machine that would detect port sweeps from multiple networks with multiple interfaces. As an illustration, if I could set up a box with eth1, eth2 and eth3. ...
4
votes
1answer
973 views

How to reproduce http traffic of a real site in another environment (e.g. VM)

There is a bug in my web application which I cannot reproduce. All the logs look ok or at least I cannot see anything unusual. But it happens. So I thought I could record all the traffic to/from my ...
-1
votes
4answers
147 views

Access Application Server from internet

I have Suse server running on one of my lan machines ,localhost, and it is running Websphere application server. I am also running an http apache on the same machine. I have configured my wireless ...
0
votes
1answer
89 views

How to stop a traffic capture?

I have created a topology on GNS3. I started a capture with the command - capture R5 f0/0 ping.cap How do I stop the capture?
-3
votes
3answers
123 views

Measure ip/port traffic [closed]

We have a small data center here in Brazil to host our servers. Now we are planing to provide some colocation and VPC hosting, and we need to measure monthly traffic of each ip/port. We can't to ...
0
votes
3answers
314 views

What network traffic is viewable when connecting over ssh?

If I connect to a server via SSH, what network traffic is viewable to someone monitoring the network? For example, if I'm at work and connect to a server via SSH, what can the network admins see? Do ...
0
votes
2answers
271 views

Can a network patch pannel affect network throughput?

In our office we have a gigabit LAN driven by Netgear ProSafe switches. I am trying to increase our throughput and am wondering if some of our patch panels could use an overhaul. I don't see any sort ...
1
vote
2answers
363 views

What does port number14443 signify? [closed]

In an internet traffic measurement it is seen that port 14443 carries a large amount of traffic. What exactly is this port? and what can be the explanation?
0
votes
1answer
572 views

log openvpn traffic by squid

is any way to log openvpn traffic (sites that users visited)? i think because openvpn use tunnel and encrypt traffic cannot log visited websites, but in a server i saw that open vpn's users traffic ...
-1
votes
2answers
1k views

How to view unencrypted Gtalk traffic? [closed]

A lot of tools allow us to view HTTPS traffic. Is there any tool out there which will decrypt TLS and allow me to see the network traffic for applications like Gtalk?
0
votes
1answer
615 views

High Email/Network Traffic on Server - SBS 2008

We have a Small Business Server 2008 box that is using up way too much internet traffic according to some very simple reports on our SonicWall TZ-210 router. The router shows that we have used 3 ...
6
votes
8answers
17k views

Linux: How to measure daily/montly network traffic?

I need to keep statistics of daily network traffic for a linux machine (CentOS 5). Is there a way to do it using standard/native tools or utilities? Or do I have to dowload special software for that? ...
0
votes
1answer
20 views

Will Windows transfer the files to the launching machine or not?

We have a "Server 1" which is located in "Location A". Next we have "Server 2" and "Server 3" which are located in "Location B". "Location B" "Server 2" ...