02-28-2006
How to check the outbound packets in Linux
I have a linux redhat box , our security department in my company informed me that my server's IP sends So many traffic in my network ,
This box I am using it as FTP server to store the other servers logs .
My question briefly is how to check my outbound packets which are going from my PC to the network , and if there is any way to find out which service or application issuing tahts traffic ????
Thanks a lot and sorry for my English
10 More Discussions You Might Find Interesting
1. Linux
Hi all,
A security scanner has been done on a linux server and have found that
The remote host does not discard RCP SYN packets which have the FIN flag set.
It tells that I need to request a patch which I haven't found yet.
I have Red Hat Linux release 7.0 (Guinness)
Kernel 2.2.16-22... (2 Replies)
Discussion started by: bert.n
2 Replies
2. Linux
I have a server with multiple Internet IP Addresses:
x.x.x.1
x.x.x.2
x.x.x.3
x.x.x.4
.
.
.
When I use links to goto a website it uses the lowest x.x.x.1
Is there a way when I invoke links, or ftp or what ever, to use x.x.x.2 or x.x.x.99 when i start the application? (2 Replies)
Discussion started by: Ikon
2 Replies
3. Shell Programming and Scripting
Hi,
I'm making a script to compile some packets and I need for each one to check if the compilation is good...
I need to check if "./configure" and "make" runs correctly.
Are any scripting commands to make this?
For example, the solution can be a command that get the program's exit code... (1 Reply)
Discussion started by: paolom
1 Replies
4. UNIX for Dummies Questions & Answers
Hi all,
I am new to Linux kernel.
we have a c file that counts the no. of sends and received packets in each interface, and indicate the user about the error/drop ration of incoming and outgoing packets.
in our Linux box , the incoming packets are dropped at random interval.
we have our... (1 Reply)
Discussion started by: kannandv
1 Replies
5. UNIX for Dummies Questions & Answers
Hi,
---------- Post updated at 04:12 AM ---------- Previous update was at 04:09 AM ----------
This is the scripts..
Date=`date +"%m/%d/%y %H:%M:%S "`
echo "Run on $Date"
echo "Run on $Date" >&2
# Setting Variables
PassDir=$PS_HOME/autosys/pass # Location of the... (0 Replies)
Discussion started by: sonja
0 Replies
6. Linux
Hi Everybody,
I would like to know the entire network packets exchange, sequence between a linux dhcp client workstation & dhcp server as client comes up starting from OS booting stage as network service starts to the time client gets dhcp IP address. This would be in a typical LAN ... (2 Replies)
Discussion started by: sudhirav
2 Replies
7. IP Networking
hello,
can anyone suggest how to delay the incoming packets ??
or how the packets are prossed inside the kernal and a way to make the packets wait a while??
it wud be vry helpful
regards
sameer (7 Replies)
Discussion started by: sameer kulkarni
7 Replies
8. IP Networking
Hello,
Our software is using a TCP socket (AF_INET, SOCK_STREAM) to communicate with an Ethernet device. When we send a message, the message object writes itself in full onto the socket's stream buffer before the software invokes send() from socket.h.
I'm still researching, but have 2... (1 Reply)
Discussion started by: bix_20002000
1 Replies
9. Debian
I spent a lot of time trying to implement outbound traffic filtering with: cgroups + tc + iptables on Debian Jessie. Unfortunately there is still something wrong.
The biggest issue is:
- cgroups install + config
- net_cls subsystem implementation
- packets marking with net_cls
- appropriate... (0 Replies)
Discussion started by: Novi
0 Replies
10. Shell Programming and Scripting
I used netstat -tp <pid> to list all Foreign Addresses i.e OutBound sockets on Linux.
Likewise, i wish to list all Foreign Addresses on Sparc Solaris.
I get illegal option -- t when i try this command on Solaris.
The second query i have is that in the output of netstat command some... (1 Reply)
Discussion started by: mohtashims
1 Replies
niff(7) Miscellaneous Information Manual niff(7)
NAME
niff - Network Interface Failure Finder (NIFF) introductory information.
DESCRIPTION
The Network Interface Failure Finder, NIFF, is a facility for detecting and reporting possible failures in network interface cards (NICs)
or their connections. Detection is done by monitoring device counters and attempting to generate traffic to NICs suspected of having
failed. Reporting is done using the Event Manager subsystem (EVM). NIFF does not drive failover operations; that is the responsibility of
the application that subscribes to NIFF's EVM events. Appropriate courses of action may include selecting another network interface for
communication or if it is a clustered environment, migrating an application. See nr(7) for further information.
At the heart of NIFF is the traffic monitor thread. The traffic monitor thread tracks changes in the network device's counters, and notes
if the received packet counter remains unchanged since the previous snapshot. As long as the counter continues to increase, the traffic
monitor thread assumes the NIC is functioning. See nifftmt(7) for further information.
The traffic monitor thread can monitor any network interface. The configuration utility, niffconfig, is used to activate and administer
the traffic monitor thread. See nifftmt(7) and niffconfig(8) for further information.
The Network Interface Failure Finder daemon, niffd, is a traffic generator for network interfaces that have been classified inactive by the
kernel traffic monitor thread. The purpose of niffd is to get the interface packet counters to increment, signifying the interface is still
alive and well. See niffd(8) for further information.
SEE ALSO
:
nifftmt(7), nr(7), niffconfig(8), niffd(8) delim off
niff(7)