02-28-2006
How to check the outbound packets in Linux
I have a linux redhat box , our security department in my company informed me that my server's IP sends So many traffic in my network ,
This box I am using it as FTP server to store the other servers logs .
My question briefly is how to check my outbound packets which are going from my PC to the network , and if there is any way to find out which service or application issuing tahts traffic ????
Thanks a lot and sorry for my English
10 More Discussions You Might Find Interesting
1. Linux
Hi all,
A security scanner has been done on a linux server and have found that
The remote host does not discard RCP SYN packets which have the FIN flag set.
It tells that I need to request a patch which I haven't found yet.
I have Red Hat Linux release 7.0 (Guinness)
Kernel 2.2.16-22... (2 Replies)
Discussion started by: bert.n
2 Replies
2. Linux
I have a server with multiple Internet IP Addresses:
x.x.x.1
x.x.x.2
x.x.x.3
x.x.x.4
.
.
.
When I use links to goto a website it uses the lowest x.x.x.1
Is there a way when I invoke links, or ftp or what ever, to use x.x.x.2 or x.x.x.99 when i start the application? (2 Replies)
Discussion started by: Ikon
2 Replies
3. Shell Programming and Scripting
Hi,
I'm making a script to compile some packets and I need for each one to check if the compilation is good...
I need to check if "./configure" and "make" runs correctly.
Are any scripting commands to make this?
For example, the solution can be a command that get the program's exit code... (1 Reply)
Discussion started by: paolom
1 Replies
4. UNIX for Dummies Questions & Answers
Hi all,
I am new to Linux kernel.
we have a c file that counts the no. of sends and received packets in each interface, and indicate the user about the error/drop ration of incoming and outgoing packets.
in our Linux box , the incoming packets are dropped at random interval.
we have our... (1 Reply)
Discussion started by: kannandv
1 Replies
5. UNIX for Dummies Questions & Answers
Hi,
---------- Post updated at 04:12 AM ---------- Previous update was at 04:09 AM ----------
This is the scripts..
Date=`date +"%m/%d/%y %H:%M:%S "`
echo "Run on $Date"
echo "Run on $Date" >&2
# Setting Variables
PassDir=$PS_HOME/autosys/pass # Location of the... (0 Replies)
Discussion started by: sonja
0 Replies
6. Linux
Hi Everybody,
I would like to know the entire network packets exchange, sequence between a linux dhcp client workstation & dhcp server as client comes up starting from OS booting stage as network service starts to the time client gets dhcp IP address. This would be in a typical LAN ... (2 Replies)
Discussion started by: sudhirav
2 Replies
7. IP Networking
hello,
can anyone suggest how to delay the incoming packets ??
or how the packets are prossed inside the kernal and a way to make the packets wait a while??
it wud be vry helpful
regards
sameer (7 Replies)
Discussion started by: sameer kulkarni
7 Replies
8. IP Networking
Hello,
Our software is using a TCP socket (AF_INET, SOCK_STREAM) to communicate with an Ethernet device. When we send a message, the message object writes itself in full onto the socket's stream buffer before the software invokes send() from socket.h.
I'm still researching, but have 2... (1 Reply)
Discussion started by: bix_20002000
1 Replies
9. Debian
I spent a lot of time trying to implement outbound traffic filtering with: cgroups + tc + iptables on Debian Jessie. Unfortunately there is still something wrong.
The biggest issue is:
- cgroups install + config
- net_cls subsystem implementation
- packets marking with net_cls
- appropriate... (0 Replies)
Discussion started by: Novi
0 Replies
10. Shell Programming and Scripting
I used netstat -tp <pid> to list all Foreign Addresses i.e OutBound sockets on Linux.
Likewise, i wish to list all Foreign Addresses on Sparc Solaris.
I get illegal option -- t when i try this command on Solaris.
The second query i have is that in the output of netstat command some... (1 Reply)
Discussion started by: mohtashims
1 Replies
LEARN ABOUT FREEBSD
ipacct
IPFW(4) BSD Kernel Interfaces Manual IPFW(4)
NAME
ipfw -- IP packet filter and traffic accounting
SYNOPSIS
To compile the driver into the kernel, place the following option in the kernel configuration file:
options IPFIREWALL
Other related kernel options which may also be useful are:
options IPFIREWALL_DEFAULT_TO_ACCEPT
options IPFIREWALL_VERBOSE
options IPFIREWALL_VERBOSE_LIMIT=100
To load the driver as a module at boot time, add the following line into the loader.conf(5) file:
ipfw_load="YES"
DESCRIPTION
The ipfw system facility allows filtering, redirecting, and other operations on IP packets travelling through network interfaces.
The default behavior of ipfw is to block all incoming and outgoing traffic. This behavior can be modified, to allow all traffic through the
ipfw firewall by default, by enabling the IPFIREWALL_DEFAULT_TO_ACCEPT kernel option. This option may be useful when configuring ipfw for
the first time. If the default ipfw behavior is to allow everything, it is easier to cope with firewall-tuning mistakes which may acciden-
tally block all traffic.
To enable logging of packets passing through ipfw, enable the IPFIREWALL_VERBOSE kernel option. The IPFIREWALL_VERBOSE_LIMIT option will
prevent syslogd(8) from flooding system logs or causing local Denial of Service. This option may be set to the number of packets which will
be logged on a per-entry basis before the entry is rate-limited.
The user interface for ipfw is implemented by the ipfw(8) utility, so please refer to the ipfw(8) manpage for a complete description of the
ipfw capabilities and how to use it.
SEE ALSO
setsockopt(2), divert(4), ip(4), ipfw(8), sysctl(8), syslogd(8), pfil(9)
BSD
October 25, 2012 BSD