Questions tagged [network-monitoring]
Describes the use of a system that constantly monitors a computer network for slow or failing components and that notifies the network administrator (via email, SMS or other alarms) in case of outages.
469
questions
0
votes
0
answers
7
views
How to calc data transfer size for a port with node.js?
I developing a node.js program,
I want know how much data transfered per port, but i didnt found native node.js solution, there is thired party program, if thay have api,it can be usefull, can you ...
- 3
0
votes
0
answers
21
views
Ocserv static tun device name for each user
Ocserv assigns dynamic interface names based on TUN device name. For example if tun device name is vpns, users connect via vpns0, vpns1 , vpns2 and ...
Everytime a user opens a new session, a new ...
0
votes
0
answers
9
views
Filter types on Network Error Login (NEL) reports
I have implemented (NEL) Network Error Login with this headers:
nel: {"report_to":"default","max_age":3600,"failure_fraction":0.5}
report-to: {"group":...
- 744
0
votes
0
answers
40
views
How to receive mirrored traffic on remote host using Ubiquiti EdgeRouterX?
I have the current network setup: two subnets are connected using an Ubiquiti EdgeRouterX, subnet 1 has a switch mirroring all traffic on that subnet to the router and on subnet 2 there is a host ...
0
votes
1
answer
55
views
Does frequent ping affect local network speed?
(Sorry for my english)
Hi, I am about to set up a monitoring server and wanted to know if pinging the network devices could significantly affect the speed of the local network.
I want to ping every ...
- 3
0
votes
1
answer
93
views
How to find out if TCP connection to server is being tampered with by third-parties?
I'm under an unreliable ISP/AS, something like the GFW. They actively try to sabotage a TCP+TLS session by attacks such as sending SYN RST to established connections, making the connection timeout, ...
- 1
0
votes
0
answers
43
views
LibreNMS / Monitoring Tools for "weak protocol"
PRTG Monitor per default warns for "weak protocols" and if an SSL check returns "No Secure protocol available"
How can this be done via LibreNMS / Monitoring Tools?
I know you can ...
- 73
0
votes
1
answer
88
views
Which one to learn: Nagios or Zabbix?
I need to answer a network administrator student which tool is more useful in terms of "employability" at the moment : Nagios or Zabbix.
But this is not my field.
I've heard that Nagios had ...
- 103
0
votes
1
answer
115
views
Best Azure function to identify surge in outgoing network traffic
We have two Azure VM's hosting web applications with back-end databases on each respective server. In the last few days we've seen a massive surge in outgoing data within the metrics. Normally this ...
- 164
0
votes
1
answer
84
views
Zabbix Server configuration Inquiry
I hope I’m posting in the right place. So, I have a question. I’m trying to set up a simple network monitor (Zabbix) in VirtualBox to monitor the hosting machine. I have everything set up, but the ...
- 1
0
votes
1
answer
107
views
Network Monitoring on Linux (RHEL/CentOS)
I am trying to monitor outgoing network traffic on a Virtual Machine running CentOS (Guest) on a Windows Machine (Host).
I installed Fiddler on the Host Machine (Windows) and allowed remote ...
- 101
0
votes
1
answer
124
views
Huawei S5600 main OIDs?
I'm working with NagiosCore to check the stats of my network's switchs (mainly S5700 (modulars and non-modulars) and S5600). Using SNMP (v2c) I'm able to get stuff defined by myself such as: ...
- 121
1
vote
0
answers
782
views
tcpdump: filtering out localhost, packets show up anyway?
I'm trying to use tcpdump to explore what on my computer talks with whom on the world wide web.
I've came this far as of yet:
lan_hosts="(hosts || to || exclude)"
local_hosts="(127.0.0....
- 36
1
vote
0
answers
132
views
How can I check if my wcf service is using NTLM or Kerberos?
My WCF service is hosted in IIS and communicates with it's clients via TCP (net.tcp binding), not http. I'm using Microsoft Network Monitor to monitor traffic on the server. I see the Protocol Name is ...
- 111
0
votes
0
answers
2k
views
IDS/IPS on Ubiquiti EdgeRouter
I have changed my network setup from the default ISP device to an Ubiquiti EdgeRouter (ER-X-SFP) a while ago. Currently I’m planing to switch to an static IPv4 address. From the ISP I would also get ...
- 11
0
votes
0
answers
39
views
How to monitor the bandwidth with detailed files transfer information?
How can I know which file is transferring from instance to public internet? Is there any monitoring tools? When I am using bandwidth monitoring tool I have got whole output and input usage info but I ...
0
votes
1
answer
60
views
Monitoring the OnPremise network appliances from Azure?
People,
I have the need to monitor the OnPremise Network appliances (Gateways, Firewalls and other services IP addresses) from Azure, then send an email alert or trigger alert via PagerDuty.
https://...
- 1,255
0
votes
1
answer
61
views
realtime monitoring of linux server network
We have a few Linux server which act as Edge network, We want realtime (or near-realtime) information on network bandwidth, top IP addresses and network bandwidth per them and other network parameters ...
- 151
0
votes
1
answer
76
views
Track Bandwidth on shared interface
On our servers running FreeBSD, we've allocated multiple public ip addresses to host different clients on single eth0 interface. The purpose of allocating separate ip to each client is to distinguish ...
0
votes
1
answer
591
views
PHP script to calculate bandwidth per directory on a server?
I am tasked with figuring out the bandwidth used per directory on a parent directory in a linux server. We are hosting 10+ different client sites in 10+ different directories, and want to figure out ...
- 278
0
votes
2
answers
46
views
Remote network monitoring when all comms fail
We had a circuit trip last night (Sunday evening 22:00) which killed all external COMMs ... so the alerting on our servers, inside the building, could not communicate out. Is there a solution to this? ...
- 187
1
vote
1
answer
6k
views
Is there a way to listen to all traffic on my router, using e.g. Wireshark or tcpdump?
I have a crazy stupid problem driving me to an early grave and I'm trying to trouble shoot what the problem is.
Is there a way to listen to all traffic going through my router, including dropped SYN ...
- 163
0
votes
1
answer
83
views
Tips for working with very large pcaps?
What is the best approach for working with very large collections of network traffic (500GB+)?
Specifically, I'd like to be able to filter packets which match various payload and protocol criteria (...
- 101
0
votes
1
answer
199
views
Windows Server Login Monitoring Powershell
I've written a basic script for PowerShell to Monitor Event 4771, I have the problem that it still shows RDS-Broker which doesn't tell anything - I want to filter it out and only send the real users ...
- 1,572
2
votes
0
answers
101
views
Why does my router go down every ~16 hours and how can I debug it further?
I have a router that is connected to a larger managed network (such as a university campus network). The router is configured with a static WAN IP address and provides NAT and DHCP to the LAN.
After ...
- 121
2
votes
1
answer
439
views
Does AWS GuardDuty monitor traffic through an ELB?
I've been trying to find a definitive answer to this question for a while. I would expect the answer to be "yes" but it does not align with what I see in practice. From the docs GuardDuty "identifies ...
- 131
1
vote
0
answers
24
views
Does in-the-field experience suggest that a HTTP POST is more reliable than PUT and DELETE
I need to cross reference my experience with that of professionals, as I'm developing a REST application that can either
Use on HTTP POST for all delete and create operations
Or use HTTP DELETE and ...
- 8,881
2
votes
0
answers
150
views
Continously monitor network consumption of per process on Linux [closed]
I have a server running Debian Stretch with a lot of running services and from the hoster's monitoring I can see some pretty hefty traffic spikes every now and then (not regular). As this could be ...
- 301
1
vote
1
answer
523
views
Monitor outbound connections
How I can monitor outbound connection that are made from my server along with the program/application which has made the connection request?
I have tried using the below command and I am not much ...
4
votes
1
answer
1k
views
how to monitor windows vpn connectivity?
I have set up Windows 10 built-in VPN for the use of one program and I have sense that this connectivity is bad. Generally my Windows machine has very reliable network connection but connectivity in ...
- 111
0
votes
0
answers
1k
views
On machine reboot via SNMP
Is it possible to reboot a windows or a linux machine via SNMP?
Most of information I've found is related to the reload of the SNMP service itself, instead of host reboot.
1
vote
0
answers
189
views
Sending ARP requests with SmokePing
I have been using SmokePing to monitor my local network for some time now and I'm happy with its graphs and email alerts. I use the fping probe and it works as expected.
I found however that, every ...
- 111
1
vote
0
answers
1k
views
Monitor outgoing network usage per HTTP request
In Apache prefork server running PHP application on Linux, each HTTP request might fetch some data from other server, for instance Memcached. Let's say we want to find out top 10 HTTP requests (ex. ...
- 131
2
votes
2
answers
12k
views
How to reset the admin password for Observium
How can i reset the password for the user admin with MySQL or a Observium script.
MariaDB [observium]> select * from users;
+---------+----------+------------------------------------+----------+---...
- 165
0
votes
1
answer
8k
views
no active checks on server [xx.xxx.xx.xx:10051]: host [host] not monitored
I am using Zabbix Active Agent to monitor hosts over the network but getting "no active checks on server [xx.xxx.xx.xx:10051]: host [host1] not monitored." errors only in one host with same exact ...
- 125
0
votes
1
answer
7k
views
Zabbix disk space monitoring using active agent in linux server
Zabbix server is giving same value for all linux servers upon disk space monitoring using Zabbix Active Agents. I am using Zabbix server 3.2. Please help.
- 125
2
votes
1
answer
2k
views
How can I enable WinHTTP trace logging in Server 2012 R2 for viewing raw HTTP commands and application details?
I have an application running on a Windows Server 2012 R2 system and the app leverages winHTTP for various network requests. It's not able to communicate with another server on the network and I ...
- 11.8k
1
vote
3
answers
11k
views
"Couldn't resolve host name: Could not resolve host:" in Zabbix
Getting "Couldn't resolve host name: Could not resolve host: example.zabbixagent.com; Name or service not known" in Zabbix server although DNS and hostname of Zabbix Active Agent is correct. Is this a ...
- 125
0
votes
1
answer
1k
views
Send notification upon Zabbix active agent shut down
I have configured zabbix server with zabbix active agents but I am not able to get notifications when zabbix active agents shut down. I have no issue getting email notifications when active agents ...
- 125
2
votes
1
answer
903
views
Log and monitor network usage by session/connection
In Resource Monitor, Network tab, in the Network Activity section, I can see each active session and how much bandwidth it is using.
I'd like to capture that information over a period of time, is ...
- 544
0
votes
3
answers
1k
views
One-way traffic with port mirror HP-2610 to Hyper-V
I have a Hyper-V box that has call recording for IP phones with the following connectivity:
PBX on an access port (native vlan 42), plugs to port 22 on switch (it has no settings for VLANs, so we set ...
- 1,140
-3
votes
1
answer
87
views
which monitoring tool is good for monitoring system hardware,software,user management and network activity for all kind of operating system? [closed]
Please kindly suggest me the tool for monitoring the system hardware, software, applications, services, user management and network related activities of IT Infrastructure.
-1
votes
1
answer
2k
views
Windows Server 2012: easiest way to monitor ports for error 4625 NTLM attacks
I'm getting thousands of hack attacks on a Windows server resulting in Security log error 4625 entries. Hackers are using random IPs, so the usual RDPguard, Syspeace, etc. tools don't work. Port 3389 ...
1
vote
0
answers
3k
views
PRTG - Windows IIS Application sensor fault
I have two sensors that are giving me the same alarm.
WMI: No result set (code: PE016) -- PerfCounter: No data to return.
(Performance Counter error 0x800007D5)
I can't for the life of me ...
- 11
0
votes
1
answer
193
views
Nagios Core - Automation
We are using Nagios Core for monitoring devices and we are currently facing some hurdles with monitoring a large scale environment. It requires a lot of manual tasks such as collecting OID's and MIB's,...
1
vote
1
answer
35
views
Determine network usage of a known process without root/elevation
My application is starting another process, and I'd like to keep track of how much data that new process has read/written from/to network sockets.
I've found tools like nethogs, but they require ...
- 123
0
votes
1
answer
2k
views
Use iptables chain to monitor traffic
We have a linux box in use as a router, with various rules (ip, tcp port, udp port, etc.) in the iptables FORWARD chain, which might be added to or removed from at any time.
I need to monitor ...
- 11
0
votes
1
answer
86
views
How do I set OpenNMS to have two types of Node Down events with different severities?
For example, I have laptops in one subnet which keep turning on and off so if a node on that subnet went down I'd class that as an intermediate incident.
However, on another subnet there are critical ...
- 36
-1
votes
1
answer
108
views
How to collect I/O Bandwidth statistics on ubuntu 14. [closed]
I want to write script/service to collect I/O bandwidth consumption on daily basis. I know nload tool which will show total I/O data transfer from the time we executed the command. I want script to ...
- 189
2
votes
1
answer
4k
views
How can NETSH be used to sniff and collate network traffic?
I am trying to capture all network traffic and view it in a human-readable way.
To begin packet capture with netsh, I am running the following command.
netsh trace start scenario=NetConnection ...
- 145