Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [monitoring]

This tag is suitable for questions about or involving network monitoring as implemented on network devices or monitoring tools used by network professionals. Examples: IP SLA, SNMP, Netflow etc.

0
votes
1answer
19 views

Netgear M4300: Is it possible to enable multiple destination ports for mirroring?

I have a Netgear m4300 12x12f. Using the web Console I'm able to use one global port for mirroring traffic from other ports. Is there a way to have different ports mirroring different traffic? I'm ...
0
votes
2answers
40 views

Monitoring URL requests on foundation's LAN

We are having a internet cafe with guests walking in and out. We would like to keep an eye on browsing traffic on LAN 192.168.2.0/24, because we don't want guests to visit wrong websites. In such ...
1
vote
0answers
22 views

In a reboot/Shutdown event, would SNMP trap be sent before the event occurrence or after that?

When a device is getting ready to shut down or reboot, Would the SNMP agent send the trap notification to the destination host before the shutdown/reboot event, or after that? What's the general rule ...
1
vote
0answers
35 views

Question in netflow statistics [closed]

Hello I'm newbie to network monitoring. I used nfdump -B to filter source port larger than 1024. Then I got 4 fields. In pkt, out pkt, in byte, out bye. Is in mean source to destination or destination ...
0
votes
0answers
22 views

problems in nfdump statistics

i am a newbie to network monitoring. an i tested a nfdump trace file with " nfdump -r -s srcip " then i got the following results. As in the screen shot, what is the different between marked flows ...
0
votes
2answers
42 views

How to calculate traffic in bytes from sFlow datagrams?

I want to approximate network traffic in bytes by writing a sFlow collector that receives sFlow datagrams, parses them, extracts key information only and applies a formula that summarizes the traffic ...
2
votes
1answer
55 views

Routing and Switching & network monitoring

hi i am facing problem in juniper switch Model: ex4200-48t ,Junos: 15.1R6.7 . i deploy network monitoring check-MK software. there is showing errors of juniper switch ports and also show in logs file ...
0
votes
1answer
230 views

CIR and EIR - how to test/calculate?

im wodering how to test CIR EIR between two localization? we have direct link between these locations and I got a question about CIR EIR How can I test/calculate it?
1
vote
2answers
35 views

Restricted Youtube access

Is it possible to enforce from Fortigate a restriction on Youtube access? We want to allow Youtube access for some of our employees who work in Media, but we want to enforce some sort of rule or ...
1
vote
1answer
34 views

How can different views onto same data model be defined in YANG?

RFC6020 contains the following statement "A NETCONF server may implement a number of modules, allowing multiple views of the same data" (my emphasis). I want to do exactly that, so that my NETCONF ...
2
votes
2answers
76 views

Capturing traffic from multiple connections on a switch

Consider the traffic monitoring setup on the bottom of this page: https://www.ntop.org/pf_ring/port-mirror-vs-network-tap/ The two lines of a network tap are connected to a switch which merges the ...
2
votes
2answers
126 views

Finding the available capacity on switch interface in bytes or bits

Below is the output from my "show interface " command PE1.18:01:44#sh interfaces Ethernet 3 Ethernet3 is up, line protocol is up (connected) Hardware is Ethernet, address is 001c.7374.3d95 ...
4
votes
1answer
98 views

Can I get what filters are applied to an interface via SNMP?

I have some firewall filters on juniper devices- ex3300s make up the majority of them. I've been looking for an oid that will let me associate an IFL with the filters that are on it, and I've yet to ...
5
votes
2answers
922 views

Decoding wpa-psk traffic with Wireshark

I want to plot how much data each client is using from a wpa-psk protected access point (that I control). For that I intend to monitor all traffic for a couple of days. However I can't decode the TCP ...
1
vote
1answer
71 views

Sensor to collector communication from SPAN, Inline or TAP

I am trying to figure out which one of the three modes or all would support this. The sensor is a computer running fprobe and pushing UDP traffic (netflow v5) to an IP address in the network. My ...
0
votes
1answer
1k views

Does Cisco-IPSLA work with Huawei-NQA?

I want to monitor udp-jitter using IP SLA (Cisco Router). The Destination Router was Huawei Router. I'm not sure whether Huawei Router doesn't support IP SLA responder. Is there anyway to use NQA with ...
2
votes
1answer
682 views

Send command lines to syslog server

I already can send each Linux command line to my syslog server. Now, I'd like to send each command line inserted onto my Cisco router to syslog server. Is it possible? If yes, how?
1
vote
1answer
160 views

What bits does iftop count when calculating and displaying the network bandwidth [closed]

I've googled and read, and googled and read. Everything I've found makes reference to it counting IP packets, but it obviously displays Bits/Byte and packets come all manner of size. What bits does ...
1
vote
2answers
97 views

Network fluctuation / delay monitoring between two nodes

Problem background: Our application communicates with multiple other nodes over SCTP. A few times in past issues were reported because of network fluctuation or too much delays that appeared for very ...
2
votes
2answers
1k views

Cisco 3560 interface counters, are the counters reset automatically?

I have a Cisco 3560G switch. Are the interface counters reset automatically, recalculated in a specific interval (5 minutes?), or not at all? I want to get (hourly, daily, monthly, etc) interface ...
0
votes
1answer
288 views

PRTG - NetFlow v9 on Cisco ASA 5520 not working [closed]

We have a PRTG Probe 192.168.4.4 in our office's Domain Controller, and we are trying to configure NetFlow on our leased Cisco ASA 5520 ver 8.2(5) We have done the following on the Cisco: conf t ...
2
votes
1answer
384 views

What field tells me the bytes in IPFIX?

In netflow there are in_bytes and in_pkts fields. What are the equivalent values in IPFIX? I'm shipping IPFIX data with softflowd and I'm getting these fields: destinationIPv4Address ...
0
votes
1answer
196 views

Best practices for IP Flow monitoring [closed]

Current flow probes (using eg. IPFIX, netFlow v5/9, sFlow) are able to monitor flows defined at least by the tuple < source IP, source Port, IP protocol, destination IP, destination Port, source ...
2
votes
2answers
2k views

Netflow vs sampled netflow

I'm working on a project where I could need Nexus 5600. These switches support sampled netflow and not netflow. I would like to use netflow to do stats and to analyze trafic at some specific times. ...
-1
votes
2answers
381 views

Valid use cases for packet deduplication? [closed]

(On-the-fly) packet de-duplication is an advertised feature of some devices in which exact copies of packets can be allegedly filtered out at near line-speed. Ignoring the plausibility of this working ...
1
vote
1answer
89 views

Is letting routers generate traps on bgp changes a bad idea

In a largish (1M+) IP environment I am responsible for monitoring/alarming and guarding IPAM integrity. Seeing an opportunity to kill two birds with one stone, I asked the guys responsible for the ...
1
vote
1answer
288 views

SNMP protocol MIBs & OIDs

I am trying to understand SNMP protocol. I have clear understanding how SNMP works on network level. We can send UDP request to device, but on this device snmpd should listen for incoming requests. ...
1
vote
2answers
167 views

More Information from ICMP & ARP

I installed DEKSI Network Administrator Demo and when it is Creating Map, in Step 3 of 4. Searching and selecting hosts for placing on the map, it found IP address and Mac perfectly, but it also found ...
0
votes
1answer
1k views

Finding Unmanaged Switches on the LAN [closed]

I need to find Unmanaged Switch on the network. How to do this? Which Application?
3
votes
2answers
736 views

Extract QoS Buffer Drops via SNMP

I am in the process of rolling out solarwinds for visibility of QoS performance using netflow and CBQOS to show QoS class usage. One thing I am unsure of is what type of monitoring is available on L2 ...
0
votes
4answers
100 views

Network traffic [closed]

I have a task to do research on network traffic analysis in cloud systems, but I'am not really sure what exactly means network traffic. Can you please explain it bit more. Thank you
2
votes
3answers
376 views

Arista switches- Email alert if interface status changes

I'm looking to be notified of interface state changes on my Arista switches without my manual polling of the logs. For example, tailing var/log/messages, I might see something like: un 29 19:10:48 ...
2
votes
2answers
258 views

Sampled Netflow

i have configured netflow in my router but my router is overheaded. So i decided to configure sampled netflow and sampling rate of 1 out of 100 packets may reduce the export if Netflow data by as ...
0
votes
1answer
855 views

How do behave the AP during monitoring mode? [closed]

I want to know how to solve the communication with associated wifi devices when AP switch to monitoring mode. Because I want to use the monitoring mode without effects the mobile that was associated ...
0
votes
1answer
300 views

SNMP configuration on dell S5000 switch

I am setting up some monitoring tools for my works network and there are two core switches that I need to be monitoring all the time. I have snmp configured on the switch but when I try to add it as ...
1
vote
1answer
439 views

How does a router monitor traffic between two devices on a switch

I recently set up a small business network, and am constantly learning more about how networking hardware works. It is my understanding that a Layer 2 device (Dell 48 port managed switch in this case) ...
1
vote
1answer
401 views

How to access the Cisco Catalyst 2960 Series switch port mirroring webpage/admin interface?

I have read the tutorials about how to send several command lines to setup port mirroring (e.g. source port, destination port). But before sending commands to the switch, I need a administration ...
3
votes
1answer
910 views

Netflow on all interfaces?

I'm reading up on Netflow and playing around in PacketTracer. Currently I'm using ip flow ingress/egress only on my Routers gigabitEthernet. How much overhead is required, is Netflow supposed to be ...
0
votes
3answers
140 views

Read out down time of switch port

Is it possible to read out the time a switch port has been in down state on Cisco switches e.g. 2960x. Br Frank
1
vote
1answer
87 views

sniffing through my company's lan [closed]

I'm in charge of the network in my company and i have to check the visited websites.We have a edgeMAX router (firmware version 1.8) with DPI and enabling netflow exporting.DPI (as is it implemented in ...
1
vote
2answers
245 views

Destination port load on a SPAN session

I have created a bar chart in Java that will display the current percent load on a each destination port per SPAN session. I have a refresh time of 30 seconds using the show interfaces command to ...
1
vote
1answer
66 views

whats the best way to check if my API connection is SSL using network monitoring tools? [closed]

I have a Java based system and it is using an API for additional features, the API has a built-in SSL connection on you just have to enable it in the code, and I was able to enable it but I still want ...
4
votes
2answers
860 views

SNMP configuration on a Cisco switch

I need to configure SNMP on a Cisco switch and link it to SNMP 1.1.1.1 SolarWinds server. Please suggest commands for the switch. We are using SNMPv3 with MD5 auth entication.
1
vote
1answer
53 views

Actively host ip and port accessed in Cisco IOS

Is there a way to set up logging on a Cisco router to keep a log of all the host IP's and the ports successfully accessed the network and the last time port was accessed, and automatically garbage ...
2
votes
1answer
416 views

Nmap doesn't see every reachable host

In my company there are 3 switches: x.x.x.8 x.x.x.9 x.x.x.10 I monitor them on Netsight, sometimes with nmap, and of course pinging. They are visible on Netsight and reachable by ping. I can log ...
2
votes
4answers
108 views

How would you discover hosts on a network if they have stateful firewalls set up?

I've been wondering how it would be possible to accurately map a network using something like nmap and discover hosts on the network if those hosts have stateful firewalls set up that filter packets ...
1
vote
0answers
84 views

「Netscreen」 VPN UP/DOWN due to loopback address source monitoring

I am dealing with a problem with Netscreen VPN. Topology is basically Server Side ーー> (Agg2)Trust/Untrust(Agg1)ーー> ーー> Remote Office (Yamaha) 100.66.xx.0/24 ーー> Netscreen VPN ーー> Internet ーー> 100....
2
votes
1answer
466 views

How to test which process that drops packets?

I simulated a Denial-of-Service attack by connecting two virtual machines, i.e. attack and victim machine. The attack machine sends lots of traffic (http) against the victim machine running an ...
2
votes
2answers
462 views

How to determine which machine is eating bandwidth [closed]

Network setup: Router: Netgear FVS318N Switch: Netgear GS752TP There are two wireless APs connected to the switch, as well as about 15 wired devices, and about 10 wireless devices. Looking for a way ...
1
vote
0answers
2k views

Get interface input/output rate statistics over SNMP from Huawei switch

We need to monitor the download/upload bandwidth on interfaces on Huawei S5300 switches, and we need to do it with a specific monitoring system. This system can get information from a switch using ...