Skip to main content
9 votes

How can I filter https when monitoring traffic with Wireshark?

You can use the "tls" filter: TLS stands for Transport Layer Security, which is the successor to the SSL protocol. If you're trying to inspect an HTTPS request, this filter may be what you're ...
Richie Thomas's user avatar
6 votes

how to monitor windows vpn connectivity?

Performance Monitor (perfmon.exe) is great for monitoring in windows. Run perfmon.exe and click the plus button to add the counters that you want to monitor. Depending on your VPN, you probably want ...
Dre's user avatar
  • 1,844
4 votes

Monitor DNS queries of all hosts in LAN?

@Zoredache's answer is the ideal answer for long term monitoring (and control) but for short term monitoring there is the widely available dnstop(8) Capturing packets or reading a pcap file, it can ...
pete's user avatar
  • 733
4 votes
Accepted

Monitor DNS queries of all hosts in LAN?

Setup a DNS server on hardware, and enable logging. Force all your clients to use it with configuration combined with firewall rules blocking clients from access DNS servers other then your DNS ...
Zoredache's user avatar
  • 132k
3 votes

Nagios Core - Automation

Large Scale means what in your case? 10? 100? 1000? 10000? 100000? What type of equipment do you want to monitor? Workstations? Office PCs? Servers? Routers? Switches? Industial controllers? You didn'...
TomTomTom's user avatar
  • 611
3 votes

How to reset the admin password for Observium

this might help someone. as it just worked for me as long as you have root access to the server cd /opt/observium ./adduser.php admin <CLASS_PASSWORD> 10 once the new user with the same level ...
computer_says_no's user avatar
3 votes
Accepted

How to reset the admin password for Observium

Look like it MD5 (1) hash with salt (abcdefgh). openssl passwd -1 build new hash from plain password You can use it to update users table. You can try build Mysql-only solution based on https://...
mmv-ru's user avatar
  • 724
3 votes
Accepted

How can NETSH be used to sniff and collate network traffic?

Just use netsh trace start capture=yes without any of the other stuff. This gets you just a basic packet capture that you can view in Network Monitor. You don't need to use the ETW providers like ...
Ryan Ries's user avatar
  • 56k
2 votes

How to monitor Azure Virtual Machines running linux?

check out Microsoft Operations Management Suite https://www.microsoft.com/en-gb/server-cloud/operations-management-suite/overview.aspx you can access it by creating an Operational Insights workspace ...
Michael Brown's user avatar
2 votes

Key differences between Nagios and Open NMS?

I would recommend you http://omdistro.org/. It is a precompiled and pre-configured version of Nagios with a lot of plugins to make management, configuration and visualization pretty easy, using mainly ...
Eduardo Gonçalves's user avatar
2 votes

How passively monitor for tcp packet loss? (Linux)

On newer systems, netstat is no longer installed by default. The human-readable frontend for /proc/net/netstat has been replaced with nstat. The updated commands are as follows: $ nstat | grep Retrans ...
Daniel T's user avatar
  • 121
2 votes
Accepted

One-way traffic with port mirror HP-2610 to Hyper-V

The port mirroring was correct as per the above config (HP states on its 25xx and 26xx models that its monitoring retains VLAN tags regardless of whether the port being monitored is set to untagged - ...
morleyc's user avatar
  • 1,130
2 votes
Accepted

Is there a way to listen to all traffic on my router, using e.g. Wireshark or tcpdump?

If your router doesn't support traffic mirroring/monitoring you could do it this way: Get a network a switch that supports traffic mirroring/monitoring or get a network hub and plug it in between the ...
joeqwerty's user avatar
  • 111k
2 votes
Accepted

Which one to learn: Nagios or Zabbix?

I second the remark from @RomeoNinov that arguments for/against either tool are more likely to generate opinions than facts. Too long for a comment: relative market shares unknown With opensource ...
diya's user avatar
  • 1,899
1 vote

Windows Server Login Monitoring Powershell

If I understand correctly, your problem is only that the filter for the RDS-Broker user is not working. You can solve this by changing the condition from ($Kontoname -eq '*RDS-Broker$*') to ($...
Tobias's user avatar
  • 1,246
1 vote

Does AWS GuardDuty monitor traffic through an ELB?

Guard Duty monitors all traffic inside your VPC. It uses flow logs, CloudTrail, and DNS logs, but as it consumes that information at source from the hyperplane you don't actually need to have flow ...
Tim's user avatar
  • 33.1k
1 vote

One-way traffic with port mirror HP-2610 to Hyper-V

I can't comment on the ProCurve setup, but since you have a dedicated NIC on the HV for monitoring do you need the extra mirroring configuration on the virtual switch too? The traffic could just be ...
LostWander's user avatar
1 vote

which monitoring tool is good for monitoring system hardware,software,user management and network activity for all kind of operating system?

Nagios. You can build custom monitoring scripts to monitor just about anything but there are plugins available for common items such as network connectivity, space, cpu and memory utilization, ...
user446843's user avatar
1 vote

no active checks on server [xx.xxx.xx.xx:10051]: host [host] not monitored

The host is disabled. As you say that you are not using Zabbix proxy and host seems to be enabled, possible reasons that mask the problem: you are comparing DNS, not host name host has visible name ...
Richlv's user avatar
  • 2,393
1 vote

How can I enable WinHTTP trace logging in Server 2012 R2 for viewing raw HTTP commands and application details?

Had similar problem as yours, this guide was helpful, i atleast now see stuff in it but not in the most helpful format. The short summary is Update the parser profile to use windows parsers Filter to ...
Anirudh Goel's user avatar
1 vote

Determine network usage of a known process without root/elevation

It's not simple, but you could use ptrace on the child process and keep track of: Which FDs are sockets. Bytes in read and write calls. Cross-reference the list in 1 and with sizes in 2 to determine ...
David's user avatar
  • 1,112
1 vote
Accepted

How do I set OpenNMS to have two types of Node Down events with different severities?

Already solved on this forum. http://ask.opennms.eu/?qa=1196/opennms-have-types-node-down-events-with-different-severities&show=1210#a1210
Louis's user avatar
  • 36
1 vote

How to collect I/O Bandwidth statistics on ubuntu 14.

Check out a tool like Munin, Zabbix, Icinga. If you really want to collect data by hand check out /proc/net/dev which gives you the current transmitted/received byte and packet count among others ...
Gábor Héja's user avatar
1 vote

Cisco C3750, detect high traffic

While the show interface <interface> command will show packet rates over intervals, it is a very blunt tool. Almost any NMS (Network Monitoring/Management System) would be a better solution. ...
TDurden's user avatar
  • 256
1 vote
Accepted

Simple uptime monitor for small remote network

My current solution is to use a tool like Pingdom or Uptime Robot (free for less than 50 monitors and alerts to Slack) to ping each SonicWall every 5 min. Since each location has a static IP, all I ...
Ryan's user avatar
  • 1,037
1 vote
Accepted

perl smokeping false packet loss

Problem soved: The main reason was that some hosts pinged through Cisco switch, which has rules for those packets
pr0logas's user avatar
  • 121
1 vote

Resetting to factory default on a Gigamon GigaVUE-212

For Gigamon Gigavue-MP, the steps from Bill Weiss above will give you access to the cli. However the config and prior saved config files are still present reset system factory-default delete file &...
David McNeill's user avatar
1 vote

Methodology to find a "stable" IP addres within some ISP's AS network

I use commercial Elfiq Link Balancers to do this. The method it uses to determine the health of a particular link is to try to establish IP:port connections to several destinations with variable ...
ewwhite's user avatar
  • 199k
1 vote

Methodology to find a "stable" IP addres within some ISP's AS network

Link Test If you are testing the reliability of the link, use tracert to dynamically find the first hop address that is on the other side of your link. Assuming your network topology isn't changing ...
Jens Ehrich's user avatar
1 vote
Accepted

Security Test and Monitoring for AWS EC2 running SFTP using OpenSSH?

For monitoring of and notifications about vulnerable OS packages, you have the AWS Inspector, which is dead-simple to get started with. For external vulnerability scanning, I'd recommend something ...
EEAA's user avatar
  • 110k

Only top scored, non community-wiki answers of a minimum length are eligible