Questions tagged [network-traffic]
The network-traffic tag has no usage guidance.
0
votes
0answers
18 views
How to display all network traffic of all local hosts
How can I display all network traffic of all hosts in my network? I can use a linux box of choice, can set eth0 to promiscuous mode and my router has all major protocols. I want to be able to tell ...
0
votes
1answer
18 views
discover additional scripts loaded from other sites when visiting a website with DNS
I noticed a (relatively) huge amount of dns packets in my wireshark recording while only visiting plain websites. Sites like amazon, facebook, comodoca and many others are requested by dns packets. So ...
0
votes
0answers
61 views
Route only SSH traffic through OpenVPN
I have a OpenVPN server running on AWS and we would like all traffic to go out the end users internet but if they are connected to openvpn, and they are using SSH to the AWS servers I would like that ...
-3
votes
1answer
18 views
Word translator tool tracing
If anyone (on our school wired network/Wi-fi) uses the Microsoft translator tool implemented in Word, would we be able to trace it or are we not able to see such activity going on in the network like ...
0
votes
1answer
26 views
NAT: Figuring out IP of broken down machine
I have a machine that was behind a natted router. Unfortunately its harddrive broke down, so I had to replace it. I have port 22 forwarded to it (in the router provided by the ISP) for remote ...
0
votes
0answers
58 views
Traffic burst in cascading Cisco switch configuration
I'm using 2 Cisco Catalyst 3850 switches (Sw1, Sw2) and 3 Cisco Nexus switches (Sw3, Sw4, Sw5) as part of my internal network, connected in the manner below (A, B, C, D, E, F represent 10G ports, i.e. ...
0
votes
0answers
23 views
is it possible to use imq interface for egress qos
I found examples to set imq interfaces for ingress traffic shaping but I have multiple interfaces and I want to shape all this different outgoing traffic.
any link or example to set imq for egress ...
1
vote
0answers
188 views
Traffic Control on a Linux-bonded / LACP interface
I have created a virtual interface (VIF) [Read Linux Bonding / LACP interfaces] using two physical ethernet interfaces of 1GBps each.
When I apply traffic control on the same, I see that the egress ...
0
votes
0answers
68 views
Track down application/process causing computer broacasting destination 255.255.255.255 port 0
We have installed Untangle and we see many broadcasts from 1 IP (client Windows 7). Almost every minute it is broadcasting to 255.255.255.255 port 0.
I would like to know how to trace the source of ...
3
votes
0answers
459 views
Limiting incoming traffic with tc police
I have a requirement to limit the total incoming traffic to 5mbit. I know this can be achieved by using the following tc command:
tc filter add dev eth0 parent ffff: protocol ip u32 match u32 0 0 ...
2
votes
1answer
343 views
Why is the iptables byte count for raw PREROUTING 0?
I plan to use iptables to measure my Internet traffic (inspired by Peter Krumins' great article http://www.catonmat.net/blog/traffic-accounting-with-iptables).
The computer which is intended to ...
0
votes
2answers
80 views
reroute traffic from A going to B to instead go to C
I have TCP traffic from 192.168.3.51 going to 192.168.3.10 but instead I would like to have it sent to 192.168.3.50
Is there a way to set this up in iptables such that only tcp traffic coming from A ...
3
votes
2answers
861 views
Process names in MS Message Analyzer
I am trying to set up the Message Analyzer viewer exactly like it is explained in this reference, but instead of steady process names I got some weird numbers, both in ProcessName and ProcessID ...
1
vote
1answer
69 views
Extracting Source => Destination rx / tx from procfs (/proc)
I know I can get rx and tx bytes for each NIC from /proc/..., but I'm looking to get rx and tx info for each source => destination pair -- basically traffic info for each network connection.
In /proc/...
2
votes
1answer
490 views
Minimum bandwidth limit on Linux systems
I need to limit the minimum bandwith from an IP to specific services/ports, by dropping all the packets that will not satisfy that minimum rate.
I saw the attribute rate in the HTB class of the Linux ...
0
votes
2answers
305 views
What's the caculation for network speed reported with sar-n DEV output?
I am confused about the network speed outputs:
If the report says:
sar -n DEV 1 1
Linux 2.6.18-194.el5PAE (dev-db) 03/26/2011 _i686_ (8 CPU)
01:11:13 PM IFACE rxpck/s txpck/s ...
1
vote
0answers
299 views
iperf3 uses TCP even if UDP is specified
I've encountered this issue with iperf3(version 3.1.3). iperf(2.0.5) works different. So, with iperf3 even if I specify that I want to use UDP, when I start a capture on the destination, first thing I ...
-1
votes
1answer
55 views
What amount of inbound traffic is considered as normal for a small blog? [closed]
I have a blog that has ~1000 page views per day. Usually the amount of incoming traffic to the web server was less than 5MB. Suddenly it popped up to 300MB for some longer period of time. This is 60 ...
4
votes
2answers
187 views
Do you trust LACP?
Are there any reasons why I should not rely on LACP when designing network topology? I exactly mean L2 switch to hypervisor connection, so it is the place where agregated traffic of VMs cumulates. We ...
0
votes
1answer
57 views
Missing lots of ipv4 traffic after dns switch to a new server
I've been migrating a traffic-heavy (https://jsonip.com) service I've run for a number of years to an upgraded server over the last week. Before the dns switch, I was averaging 9mb/s ipv4 inbound. ...
0
votes
2answers
181 views
monitor traffic at the scale of millisecond
I have several linux servers running Ubuntu 14.04, and turned them into a Spark cluster. At this point, I want to measure the network flow between the servers, at the scale of milliseconds, in order ...
0
votes
3answers
5k views
How to setup a traffic limit per user on OpenVPN?
I am setting up a VPN server using OpenVPN. The authentication method is the certificate one (different certs for client and server). The VPS has 1TB of traffic monthly.
I plan allowing up to 4 ...
2
votes
0answers
89 views
Abnormal DHCP Android device traffic cannot be identified
Hi Serverfault community members.
I've been trying to identify the source of an abnormal broadcast traffic generated by some Samsung Android devices with no success, so I ask for your help.
I have ...
1
vote
0answers
58 views
How would I limit total outbound traffic?
I've had a look round and found solutions like tc to limit the total allowed bandwidth per user, but what I'm interested in is how to limit the total outbound traffic per user.
I have a server with ...
-2
votes
2answers
40 views
How the Traffic Classes get defined
I often come across in networking related literature the term 'traffic class'. And it looks like it is platform specific, sometimes they talk about 8 traffic classes, sometimes about 64.
1) Is this ...
1
vote
0answers
114 views
Network Traffic fluctuating, even with loopback
I am using iperf tool to benchmark my network interfaces on two identical machines (Dell Blade Server M620). Both have given different results.
On 1st machine, I ran server and clients as:
Server ==>...
6
votes
1answer
137 views
How to extract X.509 certificate from live network traffic automatically on Linux OS
I will appreciate if someone can point me How to extract an X.509 certificate from live network traffic automatically during the handshake phase between client and server on Linux OS.
A similar ...
6
votes
1answer
3k views
How to set up IAM Role Permissions for VPC CloudWatch logs?
I am trying to allow aws to start my log service, and I have my log streams, and log groups added already.
When i got to my VPC dashboard, the status of the Flow Log I'm interested in says:
Access ...
1
vote
2answers
2k views
OpenVPN solution/options for traffic reduction?
I am looking into VPN for the purpose of traffic reduction on the client side. CPU load is secondary.
Is lzo good enough to beat the overhead malus?
Are there other options to tune compression in ...
2
votes
2answers
196 views
Potential traffic issues on one big(ger) subnet
Posts like this:
Most traffic in a corporate LAN is client to server nowadays, and a
router not very well setup rather becomes a bottleneck AND a SPOF. and
200+ clients on a subnet wasn't a ...
0
votes
1answer
55 views
What are the tools needed to best asses a load balancer?
I'm building a Paas with Docker container in the field of Networkf Function Virtualization. I need to deploy some load-balancers inside containers.
I need to asses the load balancers in differents ...
0
votes
1answer
207 views
Random spikes of high ingress traffic. What could be the cause? [closed]
I understand that this is rather a generic question but wanted to see if you all could offer some good feedback.
Our business has three locations, one in the West Coast, two in the East Coast. Our ...
0
votes
1answer
849 views
HowTo: OpenWRT routing/tunneling all traffic through an inline Snort sensor
I want all traffic that hits the OpenWRT router redirecting/ tunnelin through a dedicated Snort/Suricata machine, before it leaves the local network. The Snort/Suricata machine should act as an inline ...
1
vote
1answer
311 views
High suspicious traffic + connection slow and disconnecting on VPS
I have a problem with my VPS hosted by OVH in France: I have a high traffic. If I look at ifconfig it gives:
eth0 Link encap:Ethernet HWaddr XXXX
... ... ...
RX bytes:...
1
vote
2answers
210 views
Clients phone provider claiming high latency over UDP, how do I test?
A client of our uses a hosted phone solution for his 50 agent call centre. They use a hosted dialer who make the out going calls, once the connection is made the call is passed to my clients user ...
4
votes
1answer
412 views
Incredibly high peak of traffic (Network In) on AWS [closed]
I've found something extremely werid on my EC2 instance today; a peak on the "Network In" that goes beyond anything that had happened before, as you can see in the screenshot. Any idea about how to ...
0
votes
1answer
368 views
Spam Traffic, DDOS Attack & Server Crashing
I am running phpfox application in my server under my main domain name fetlock.com and I am getting large amount of spam and also suffering from DDOS attacks from multiple IP addresses. My server ...
-1
votes
2answers
425 views
Suspect traffic from 185.0.0.0/8 [closed]
I have a server/gateway running Debian 7. There is a big incoming traffic (for a homemade server) from an ip address located at 185.0.0.0/8 network for more than 40k packets in 24h. I have blocked all ...
0
votes
1answer
831 views
how to forward all traffic on specific interface to ip address
I have one Linux machine that have 2 interfaces. The first one is used as a default one and provides access to internet, the second interface was added as a dedicated link to send packets from tcpgen ...
2
votes
7answers
9k views
Is it possible to redirect/bounce TCP traffic to an external destination, based on rules?
I'm not even sure if this is possible...
Also, please forgive my ignorance on the subject.
What I'm looking for is for "something" that would allow me to redirect all TCP traffic arriving to host A ...
0
votes
1answer
578 views
network gateway can't see traffic for monitoring
I've just setup a new CentOS 6.4 machine to act as a default gateway for the LAN at head office. It's primary task is simply to route traffic to the appropriate place, ie VPN servers or the firewall ...
6
votes
4answers
21k views
How do I get the number of (currently) established TCP connections for a specific port?
How do I get the number of (currently) established TCP connections for a specific port?
I have managed to get counters for traffic working by doing i.e for outgoing RTMP.
iptables -N $CHAIN
...
2
votes
6answers
1k views
Wireshark Capture Between Two Routers
How would one go about capturing OSPF traffic in Wireshark between two routers?
I'm looking to do something like this:
[RTR A] - - - [LAPTOP] - - - [RTR B]
-1
votes
1answer
803 views
How to test server under heavy network traffic? [closed]
I need to test our server infrastructure providing static content, under heavy traffic. I need to utilize 10GBps at minimum if our new CDN infrastructure is working correctly, or pinout bottlenecks. ...
8
votes
2answers
2k views
Varnish running out of open ports, lots of SYN_SENT connections
Recently we've been experiencing issues with our Varnish (3x) -> Apache (3x) setup, resulting in a huge spike in SYN_SENT connections.
The spike itself is due to the amount of new traffic hitting the ...
0
votes
2answers
789 views
Network bandwidth requirements for a one-way Active Directory trust
I am considering establishing a one-way trust relationship between a local Active Directory domain and a remote (across a WAN VPN) Active Directory domain. Since the bandwidth between sites is ...
0
votes
1answer
814 views
Capture traffic on web server
I have a web server that is accepting web service calls on port 8081 - I want to see the packets coming through. I tried using fiddler, but it doesn't see anything. I don't have access to the code, ...
-1
votes
2answers
816 views
Tool to analyze the real time traffic in Windows XP SP2 [closed]
My client machine/(s) is/(are) Windows XP SP2. I can’t effort every time to have physical access to my server machine. To analyze the real time traffic and bandwidth between client and server machine, ...
1
vote
3answers
2k views
Find whats using all my servers bandwidth
TLDR: how can I dig deeper into my Mac mini OSX server to determine what processes are consuming so much bandwidth, or where all the inbound traffic is coming from?
Resource caching is on, all ...
1
vote
2answers
2k views
Monitor incoming TCP/UDP flood attack and graph it
I'm preparing a presentation on a security issue and want to include a demonstration. It won't be in real time, I just need to show some pictures of the results.
I have some VPSes that will perform ...
