9 votes

How can I filter https when monitoring traffic with Wireshark?

You can use the "tls" filter: TLS stands for Transport Layer Security, which is the successor to the SSL protocol. If you're trying to inspect an HTTPS request, this filter may be what you're ...
Richie Thomas's user avatar
6 votes

how to monitor windows vpn connectivity?

Performance Monitor (perfmon.exe) is great for monitoring in windows. Run perfmon.exe and click the plus button to add the counters that you want to monitor. Depending on your VPN, you probably want ...
Dre's user avatar
  • 1,834
5 votes
Accepted

Monitor DELL hardware on VMware ESXi 5.5 server

Yes, you can monitor the standalone ESXi Host using any SNMP monitoring software but some items may only be visible using a monitoring tool that supports the CIM protocol. All of my ESXi Hosts are ...
mhughesnp's user avatar
  • 136
4 votes

Monitor DNS queries of all hosts in LAN?

@Zoredache's answer is the ideal answer for long term monitoring (and control) but for short term monitoring there is the widely available dnstop(8) Capturing packets or reading a pcap file, it can ...
pete's user avatar
  • 723
4 votes
Accepted

Monitor DNS queries of all hosts in LAN?

Setup a DNS server on hardware, and enable logging. Force all your clients to use it with configuration combined with firewall rules blocking clients from access DNS servers other then your DNS ...
Zoredache's user avatar
  • 132k
4 votes

Monitor DELL hardware on VMware ESXi 5.5 server

I understand what you're looking for; specific notes on how to manage and monitor the health of a standalone VMware ESXi host. In practice, the approach should be slightly different. I'll explain how ...
ewwhite's user avatar
  • 198k
3 votes

Nagios Core - Automation

Large Scale means what in your case? 10? 100? 1000? 10000? 100000? What type of equipment do you want to monitor? Workstations? Office PCs? Servers? Routers? Switches? Industial controllers? You didn'...
TomTomTom's user avatar
  • 611
3 votes
Accepted

How can NETSH be used to sniff and collate network traffic?

Just use netsh trace start capture=yes without any of the other stuff. This gets you just a basic packet capture that you can view in Network Monitor. You don't need to use the ETW providers like ...
Ryan Ries's user avatar
  • 55.9k
3 votes
Accepted

How to reset the admin password for Observium

Look like it MD5 (1) hash with salt (abcdefgh). openssl passwd -1 build new hash from plain password You can use it to update users table. You can try build Mysql-only solution based on https://...
mmv-ru's user avatar
  • 714
3 votes

How to reset the admin password for Observium

this might help someone. as it just worked for me as long as you have root access to the server cd /opt/observium ./adduser.php admin <CLASS_PASSWORD> 10 once the new user with the same level ...
computer_says_no's user avatar
2 votes

Key differences between Nagios and Open NMS?

I would recommend you http://omdistro.org/. It is a precompiled and pre-configured version of Nagios with a lot of plugins to make management, configuration and visualization pretty easy, using mainly ...
Eduardo Gonçalves's user avatar
2 votes

How to monitor Azure Virtual Machines running linux?

check out Microsoft Operations Management Suite https://www.microsoft.com/en-gb/server-cloud/operations-management-suite/overview.aspx you can access it by creating an Operational Insights workspace ...
Michael Brown's user avatar
2 votes
Accepted

One-way traffic with port mirror HP-2610 to Hyper-V

The port mirroring was correct as per the above config (HP states on its 25xx and 26xx models that its monitoring retains VLAN tags regardless of whether the port being monitored is set to untagged - ...
morleyc's user avatar
  • 1,150
2 votes

How passively monitor for tcp packet loss? (Linux)

On newer systems, netstat is no longer installed by default. The human-readable frontend for /proc/net/netstat has been replaced with nstat. The updated commands are as follows: $ nstat | grep Retrans ...
Daniel T's user avatar
  • 121
2 votes
Accepted

Is there a way to listen to all traffic on my router, using e.g. Wireshark or tcpdump?

If your router doesn't support traffic mirroring/monitoring you could do it this way: Get a network a switch that supports traffic mirroring/monitoring or get a network hub and plug it in between the ...
joeqwerty's user avatar
  • 111k
2 votes
Accepted

Which one to learn: Nagios or Zabbix?

I second the remark from @RomeoNinov that arguments for/against either tool are more likely to generate opinions than facts. Too long for a comment: relative market shares unknown With opensource ...
diya's user avatar
  • 1,829
1 vote

How can I enable WinHTTP trace logging in Server 2012 R2 for viewing raw HTTP commands and application details?

Had similar problem as yours, this guide was helpful, i atleast now see stuff in it but not in the most helpful format. The short summary is Update the parser profile to use windows parsers Filter to ...
Anirudh Goel's user avatar
1 vote

One-way traffic with port mirror HP-2610 to Hyper-V

I can't comment on the ProCurve setup, but since you have a dedicated NIC on the HV for monitoring do you need the extra mirroring configuration on the virtual switch too? The traffic could just be ...
LostWander's user avatar
1 vote

which monitoring tool is good for monitoring system hardware,software,user management and network activity for all kind of operating system?

Nagios. You can build custom monitoring scripts to monitor just about anything but there are plugins available for common items such as network connectivity, space, cpu and memory utilization, ...
user446843's user avatar
1 vote

Cisco C3750, detect high traffic

While the show interface <interface> command will show packet rates over intervals, it is a very blunt tool. Almost any NMS (Network Monitoring/Management System) would be a better solution. ...
TDurden's user avatar
  • 246
1 vote

Determine network usage of a known process without root/elevation

It's not simple, but you could use ptrace on the child process and keep track of: Which FDs are sockets. Bytes in read and write calls. Cross-reference the list in 1 and with sizes in 2 to determine ...
David's user avatar
  • 1,092
1 vote
Accepted

How do I set OpenNMS to have two types of Node Down events with different severities?

Already solved on this forum. http://ask.opennms.eu/?qa=1196/opennms-have-types-node-down-events-with-different-severities&show=1210#a1210
Louis's user avatar
  • 36
1 vote

How to collect I/O Bandwidth statistics on ubuntu 14.

Check out a tool like Munin, Zabbix, Icinga. If you really want to collect data by hand check out /proc/net/dev which gives you the current transmitted/received byte and packet count among others ...
Gábor Héja's user avatar
1 vote

Methodology to find a "stable" IP addres within some ISP's AS network

I use commercial Elfiq Link Balancers to do this. The method it uses to determine the health of a particular link is to try to establish IP:port connections to several destinations with variable ...
ewwhite's user avatar
  • 198k
1 vote

Methodology to find a "stable" IP addres within some ISP's AS network

Link Test If you are testing the reliability of the link, use tracert to dynamically find the first hop address that is on the other side of your link. Assuming your network topology isn't changing ...
Jens Ehrich's user avatar
1 vote
Accepted

Security Test and Monitoring for AWS EC2 running SFTP using OpenSSH?

For monitoring of and notifications about vulnerable OS packages, you have the AWS Inspector, which is dead-simple to get started with. For external vulnerability scanning, I'd recommend something ...
EEAA's user avatar
  • 110k
1 vote

network traffic capture between 2 vms

The normal way to do this would be to use the Network tracing feature included in VirtualBox. I think this might be unavailable in the GUI so you would have to use the Commandline Interface. In a ...
pacey's user avatar
  • 3,833
1 vote

How do APM systems monitor and collect machine interactions?

Then you also have non-intrusive monitoring that helps you proactively exercise your applications via recorded scripts and monitor response time to get alerted of problems and slow downs. Many APM ...
user363503's user avatar
1 vote

How reliable is /sys/class/net/eth0/statistics/rx_bytes for bandwidth statistics?

I´ve installed in a lot of my linux servers to monitor my traffic interface the vnstat command. It is very easy to install and you get with this great deal of information. https://www.howtoforge.com/...
santimviejo's user avatar
1 vote
Accepted

Simple uptime monitor for small remote network

My current solution is to use a tool like Pingdom or Uptime Robot (free for less than 50 monitors and alerts to Slack) to ping each SonicWall every 5 min. Since each location has a static IP, all I ...
Ryan's user avatar
  • 1,037

Only top scored, non community-wiki answers of a minimum length are eligible