The tag has no wiki summary.

learn more… | top users | synonyms

0
votes
2answers
177 views

SYN packets sent from one server but never arrives at destination

I am troubleshooting network problems for a client, remotely. The problem they have is that they get "connection timed out" occasionally between a web server and and a back-end search server. They can ...
1
vote
1answer
154 views

Detecting a host doing a port sweep across multiple interfaces/networks

I'm trying to set up a honey-pot like machine that would detect port sweeps from multiple networks with multiple interfaces. As an illustration, if I could set up a box with eth1, eth2 and eth3. ...
0
votes
1answer
161 views

Spam Traffic, DDOS Attack & Server Crashing

I am running phpfox application in my server under my main domain name fetlock.com and I am getting large amount of spam and also suffering from DDOS attacks from multiple IP addresses. My server ...
0
votes
1answer
364 views

how to forward all traffic on specific interface to ip address

I have one Linux machine that have 2 interfaces. The first one is used as a default one and provides access to internet, the second interface was added as a dedicated link to send packets from tcpgen ...
0
votes
1answer
622 views

log openvpn traffic by squid

is any way to log openvpn traffic (sites that users visited)? i think because openvpn use tunnel and encrypt traffic cannot log visited websites, but in a server i saw that open vpn's users traffic ...
2
votes
0answers
392 views

curl request results in heavy load on the server

We consume an XML Datafeed by sending cURL requests to the provider's server. They do not allow us to cache, so each pageview is a new cURL request. Twice this year, our server has crashed with the ...
0
votes
0answers
80 views

HowTo: OpenWRT routing/tunneling all traffic through an inline Snort sensor

I want all traffic that hits the OpenWRT router redirecting/ tunnelin through a dedicated Snort/Suricata machine, before it leaves the local network. The Snort/Suricata machine should act as an inline ...
0
votes
0answers
172 views

iptables configuration to block unwanted traffic on specific MAC addresses

I want to block all Skype,Facetime, VOIP traffic on a MAC address. My approach is to block all ports from 450 to 65535 and this is my commandline: iptables -A INPUT -p tcp -destination-port 450:65535 ...
0
votes
0answers
47 views

Imbalance between DNS query and response rates

The following figures shows the rate of UDP DNS queries and responses of a traffic passing a router. DNS query is a DNS packet with query/response flag set to 0 in header and DNS response the one with ...