7
votes
How can I filter https when monitoring traffic with Wireshark?
You can use the "tls" filter:
TLS stands for Transport Layer Security, which is the successor to the SSL protocol. If you're trying to inspect an HTTPS request, this filter may be what you're ...
- 171
6
votes
How can I filter https when monitoring traffic with Wireshark?
Filter tcp.port==443 and then use the (Pre)-Master-Secret obtained from a web browser to decrypt the traffic.
Some helpful links:
https://security.stackexchange.com/questions/35639/decrypting-tls-...
- 354
6
votes
how to monitor windows vpn connectivity?
Performance Monitor (perfmon.exe) is great for monitoring in windows.
Run perfmon.exe and click the plus button to add the counters that you want to monitor.
Depending on your VPN, you probably want ...
- 1,710
5
votes
Ping Equivalent For Checking If A Port Is Open
You could use nping from nmap like:
C:\>nping --tcp -p 80 192.168.1.1
where -p specifies the port to scan (here: 80).
Furthermore you can use -H for hiding sent packets, in favor of showing only ...
- 265
5
votes
Accepted
Monitor DELL hardware on VMware ESXi 5.5 server
Yes, you can monitor the standalone ESXi Host using any SNMP monitoring software but some items may only be visible using a monitoring tool that supports the CIM protocol.
All of my ESXi Hosts are ...
- 136
4
votes
Monitor DELL hardware on VMware ESXi 5.5 server
I understand what you're looking for; specific notes on how to manage and monitor the health of a standalone VMware ESXi host.
In practice, the approach should be slightly different. I'll explain how ...
- 197k
4
votes
Accepted
Monitor DNS queries of all hosts in LAN?
Setup a DNS server on hardware, and enable logging. Force all your clients to use it with configuration combined with firewall rules blocking clients from access DNS servers other then your DNS ...
- 130k
4
votes
Monitor DNS queries of all hosts in LAN?
@Zoredache's answer is the ideal answer for long term monitoring (and control) but for short term monitoring there is the widely available dnstop(8)
Capturing packets or reading a pcap file, it can ...
- 723
3
votes
Icinga 2 vs Nagios 4 vs Shinken 2 : is there Performance Benchmarking comparison available?
Benchmarks for monitoring environments always differ and numbers won't apply to your requirements. Although there's a rich community for each project on its own where you may ask others to share their ...
- 845
3
votes
Accepted
Count number of DNS (bind9) clients?
1 - query logging
Enable query logging rndc querylog and parse your log files, like this:
grep -Eo "client ([0-9]{1,3}[\.]){3}[0-9]{1,3}" /path/to/logfile | sort -u | uniq
client 10.0.252.1
client ...
- 775
3
votes
Accepted
How can NETSH be used to sniff and collate network traffic?
Just use netsh trace start capture=yes without any of the other stuff. This gets you just a basic packet capture that you can view in Network Monitor.
You don't need to use the ETW providers like ...
- 55.3k
3
votes
Nagios Core - Automation
Large Scale means what in your case? 10? 100? 1000? 10000? 100000?
What type of equipment do you want to monitor? Workstations? Office PCs? Servers? Routers? Switches? Industial controllers?
You didn'...
- 611
2
votes
Is there a way to get wireshark to capture packets sent from/to localhost on Windows?
Please try Npcap: https://github.com/nmap/npcap, it is based on WinPcap and supports loopback traffic capturing on Windows. Npcap is a subproject of Nmap (http://nmap.org/), so please report any ...
- 121
2
votes
Key differences between Nagios and Open NMS?
I would recommend you http://omdistro.org/. It is a precompiled and pre-configured version of Nagios with a lot of plugins to make management, configuration and visualization pretty easy, using mainly ...
2
votes
Accepted
Is there a GUI tool to log and view outgoing CURL requests from a Linux server?
I know that you are looking for GUI, but there is no GUI with magic button "SHOW ME WHO HACKED ME". This isn't TV, this is system administration. You need to use proper tools.
For starters, you can ...
- 1,667
2
votes
Is there a GUI tool to log and view outgoing CURL requests from a Linux server?
I suggest Burp suite Fiddler and Wireshark for deeper analyzing.
- 121
2
votes
Accepted
How to set up an end-to-end SNMP data collection system to cloud?
"deploy a probe or agent on-site" -- install something inside the network that does the collection, then return the data to the management station.
"SNMP proxies" -- software which receives an SNMP ...
- 96.1k
2
votes
How to monitor network activity in openwrt
High latency is sometimes due to contention for upstream bandwidth. wrtbwmon would certainly help you figure out which device is using bandwidth, but it is designed for long-term monitoring. If you ...
- 31
2
votes
On-the-fly decoding HTTP bodies on Linux?
Content encoded with Content-Encoding: gzip can be easily decompressed with piping the content through gzip -d. For deflate I don't know an utility but it can be done with some zlib programming. SDCH ...
- 12.9k
2
votes
How to log all inbound connections on Windows server
In Wireshark (1.12.4 here): you can try on the menu Statistics and use the tools Conversations or Endpoints (whatever it fits your needs), once there you can choose to show connections statistics on ...
2
votes
How to monitor Azure Virtual Machines running linux?
check out Microsoft Operations Management Suite
https://www.microsoft.com/en-gb/server-cloud/operations-management-suite/overview.aspx
you can access it by creating an Operational Insights workspace ...
- 3,254
2
votes
Accepted
One-way traffic with port mirror HP-2610 to Hyper-V
The port mirroring was correct as per the above config (HP states on its 25xx and 26xx models that its monitoring retains VLAN tags regardless of whether the port being monitored is set to untagged - ...
- 1,150
2
votes
Accepted
How to reset the admin password for Observium
Look like it MD5 (1) hash with salt (abcdefgh).
openssl passwd -1 build new hash from plain password
You can use it to update users table.
You can try build Mysql-only solution based on https://...
- 704
2
votes
Accepted
Is there a way to listen to all traffic on my router, using e.g. Wireshark or tcpdump?
If your router doesn't support traffic mirroring/monitoring you could do it this way:
Get a network a switch that supports traffic mirroring/monitoring or get a network hub and plug it in between the ...
- 109k
2
votes
Accepted
Which one to learn: Nagios or Zabbix?
I second the remark from @RomeoNinov that arguments for/against either tool are more likely to generate opinions than facts. Too long for a comment:
relative market shares unknown
With opensource ...
- 1,773
1
vote
How reliable is /sys/class/net/eth0/statistics/rx_bytes for bandwidth statistics?
I´ve installed in a lot of my linux servers to monitor my traffic interface the vnstat command. It is very easy to install and you get with this great deal of information. https://www.howtoforge.com/...
- 64
1
vote
Accepted
Simple uptime monitor for small remote network
My current solution is to use a tool like Pingdom or Uptime Robot (free for less than 50 monitors and alerts to Slack) to ping each SonicWall every 5 min.
Since each location has a static IP, all I ...
- 1,017
1
vote
Graph zabbix and time navigator have different time periods
Currently, Zabbix server, Zabbix frontend, and separate widgets in the frontend all use different time zones (if they are running in different time zones or users access them from different time zones)...
- 1,143
1
vote
Accepted
Use Nagios to monitor 2 locations
If you only monitor datacenter A from datacenter B you introduce a possibly unwanted component into your measurement namely the health of the internet.
My strategy is to monitor A from A and B from B....
- 25.4k
1
vote
Count number of DNS (bind9) clients?
Fundamentally, the easiest way to get this information is from tcpdump. I've been doing something similar recently myself, but looking for different patterns. You may find some of what I have done to ...
- 3,999
Only top scored, non community-wiki answers of a minimum length are eligible