Questions tagged [monitoring]
This tag is suitable for questions about or involving network monitoring as implemented on network devices or monitoring tools used by network professionals. Examples: IP SLA, SNMP, Netflow etc.
105 questions
0
votes
1
answer
64
views
What is the difference between these OIDs on a Aruba Wlan Controller?
For my bachelors thesis, I have to monitor the WLAN Access Points of the university campus. For example, number of connected Clients and how many Clients are connected to each Access Point. Therefore ...
CommunityBot
- 1
2
votes
1
answer
166
views
「Netscreen」 VPN UP/DOWN due to loopback address source monitoring
I am dealing with a problem with Netscreen VPN.
Topology is basically
Server Side ーー＞ (Agg2)Trust/Untrust(Agg1)ーー＞ ーー＞ Remote Office (Yamaha)
100.66.xx.0/24 ーー＞ Netscreen VPN ーー＞ Internet ーー＞ 100....
CommunityBot
- 1
0
votes
0
answers
158
views
Zabbix with Fortimanager
I am seeking assistance with configuring Zabbix to monitor FortiGates that are managed by FortiManager. Despite configuring FortiManager with SNMP and adding a host for it in Zabbix, I am not seeing ...
- 21
0
votes
1
answer
447
views
Can you sniff network traffic through a VPN tunnel? [closed]
Background:
I am doing research for building an automated penetration testing application. All tests will be run from some server with a public IP ("testing server"). The objective is to ...
- 88k
0
votes
2
answers
2k
views
How to monitor vlan using SNMP?
I am a newbie to building a monitor system using Prometheus and SNMP exporter, I have succeeded get metric from the physical interface, but I want to monitor VLAN on a trunk port, is that possible ? ...
CommunityBot
- 1
0
votes
1
answer
159
views
snmpget for HP switch - ifType not found
I'm learning about fetching information via SNMP towards our HP switches. I'm trying to query a switch using the OID BRIDGE-MIB::dot1dTpFdbPort included with a known MAC address 50:65:f3:2e:c5:5c, as ...
- 1,618
1
vote
0
answers
193
views
Meraki and Syslog-NG OSE [closed]
I've been struggling epically to export legible logs from my Meraki devices to a server running Syslog-NG OSE 3.30. No matter what source driver I use on the server, I see errors like this (...
2
votes
1
answer
993
views
What field tells me the bytes in IPFIX?
In netflow there are in_bytes and in_pkts fields. What are the equivalent values in IPFIX?
I'm shipping IPFIX data with softflowd and I'm getting these fields:
destinationIPv4Address
...
CommunityBot
- 1
0
votes
1
answer
273
views
Best practices to build network flow monitoring
Recently I'm investigating the solutions for ip flow monitoring, and come across a lot of pages talking about different solutions and trade-offs between netflow, sflow, IPFIX, etc. In short, netflow/...
CommunityBot
- 1
0
votes
3
answers
7k
views
How can I monitor traffic matching a IP address?
I see this article:
user@host> monitor traffic matching “port 22” no-resolve
there can matching a port
and I can matching arp too:
user@host> monitor traffic matching “arp” no-resolve
but, ...
- 846
1
vote
1
answer
2k
views
mirroring-group not possible on Aruba switch
I am currently in the situation of needing to monitor several ports on a Aruba 2530-24G simultaneously from several other ports. Those are basically HP devices, right?
A good solution would be a ...
1
vote
1
answer
3k
views
Does Cisco-IPSLA work with Huawei-NQA?
I want to monitor udp-jitter using IP SLA (Cisco Router). The Destination Router was Huawei Router. I'm not sure whether Huawei Router doesn't support IP SLA responder. Is there anyway to use NQA with ...
CommunityBot
- 1
0
votes
0
answers
59
views
uncorrected snmp Qos value from cisco
hello i have a router cisco 1006
and i create a policy-map
with to class
policy-map CheckBand-BandPerUsr
class BandPerUsr
police cir 10000000000
class class-default
police cir 10000000000
...
- 331
-1
votes
2
answers
925
views
What's the inline monitoring?
What's the inline monitoring?
I searched wikipedia and google but do not find the meaning of inline monitoring for network.
who can tell me the definition of it?
I can get the definition of passive ...
- 2,269
0
votes
1
answer
125
views
Monitor individual device traffic on Cisco RV042
I am able to monitor Total Traffic consumption on the Cisco RV042 router using SNMP and PRTG.
I want to be able to monitor traffic used by each device on my net
- 68k
1
vote
1
answer
296
views
Is it possible to differentiate cisco ports on monitoring system via snmp?
I am managing some cisco switches in my monitoring software (zabbix), and it provides useful insights that I would like to monitor:
Warning on link up / down
Warning when ports are on half duplex
...
CommunityBot
- 1
1
vote
1
answer
360
views
ARPs in WIFI Interface Monitor Mode
I set my WIFI interface to monitor mode.
I did not expect to see any ARP requests.
Can someone explain why there is ARP traffic?
- 101k
11
votes
2
answers
3k
views
How does nmap distinguish closed ports from filtered ports
Let's suppose we are doing a TCP connect scan.
a nmap scan on google returns the following output :
PORT STATE SERVICE
80/tcp open http
443/tcp open https
However, if I try to ...
- 1,924
0
votes
1
answer
128
views
why doesn't WireShark show any traffic from invalid certificate https site? [closed]
i have tried mobile apps like HttpCanary and pc programs like wireshark still got nothing from the site !!
- 126
8
votes
2
answers
2k
views
SNMP Monitoring Juniper EX8216 switches for Rx/Tx power, temperature and bias current
I am trying to monitor individual transceivers on two EX8216 Juniper switches regarding the following parameters:
RxPower
TxPower
Bias Current
Temperature
The methodology I am ...
- 9,555
8
votes
1
answer
7k
views
Remote sniffing with ERSPAN to the desktop
I know how to use both SPAN and RSPAN. If I'm not wrong, ERSPAN leads us to the possibility of remotely monitoring a router through an IP network and a GRE tunnel. However a tunnel end-point is needed....
- 30k
0
votes
1
answer
509
views
Netgear M4300: Is it possible to enable multiple destination ports for mirroring?
I have a Netgear m4300 12x12f. Using the web Console I'm able to use one global port for mirroring traffic from other ports. Is there a way to have different ports mirroring different traffic? I'm ...
- 19.8k
0
votes
2
answers
72
views
Monitoring URL requests on foundation's LAN
We are having a internet cafe with guests walking in and out. We would like to keep an eye on browsing traffic on LAN 192.168.2.0/24, because we don't want guests to visit wrong websites. In such ...
- 3,138
1
vote
0
answers
616
views
In a reboot/Shutdown event, would SNMP trap be sent before the event occurrence or after that? [closed]
When a device is getting ready to shut down or reboot, Would the SNMP agent send the trap notification to the destination host before the shutdown/reboot event, or after that?
What's the general rule ...
- 111
9
votes
4
answers
2k
views
Measuring per-link latency/jitter/packet-loss
I need to measure the latency, jitter and packet-loss per link in a network, as opposed to end-to-end, e.g. like this:
s1-eth0 <--> s2-eth0 (~ 20µs avg. latency, standard derivation 10µs, 57 % ...
- 205
0
votes
2
answers
1k
views
How to calculate traffic in bytes from sFlow datagrams?
I want to approximate network traffic in bytes by writing a sFlow collector that receives sFlow datagrams, parses them, extracts key information only and applies a formula that summarizes the traffic ...
- 88k
2
votes
2
answers
2k
views
Cisco 3560 interface counters, are the counters reset automatically?
I have a Cisco 3560G switch. Are the interface counters reset automatically, recalculated in a specific interval (5 minutes?), or not at all?
I want to get (hourly, daily, monthly, etc) interface ...
- 101k
2
votes
1
answer
404
views
Routing and Switching & network monitoring
hi i am facing problem in juniper switch Model: ex4200-48t ,Junos: 15.1R6.7 . i deploy network monitoring check-MK software. there is showing errors of juniper switch ports and also show in logs file ...
- 9,555
2
votes
1
answer
568
views
Nmap doesn't see every reachable host
In my company there are 3 switches:
x.x.x.8
x.x.x.9
x.x.x.10
I monitor them on Netsight, sometimes with nmap, and of course pinging.
They are visible on Netsight and reachable by ping. I can log ...
CommunityBot
- 1
0
votes
1
answer
696
views
CIR and EIR - how to test/calculate?
im wodering how to test CIR EIR between two localization? we have direct link between these locations and I got a question about CIR EIR
How can I test/calculate it?
- 381
1
vote
2
answers
58
views
Restricted Youtube access
Is it possible to enforce from Fortigate a restriction on Youtube access?
We want to allow Youtube access for some of our employees who work in Media, but we want to enforce some sort of rule or ...
- 88k
7
votes
1
answer
4k
views
How to get ipfix working with openvswitch? [closed]
I'm trying to monitor my OpenVswitch via IPFix. But I'm banging my head against a brick wall for two days now :/
According to the ovs-vsctl manpage I need to add a new entry into the config-database, ...
0
votes
1
answer
594
views
PRTG - NetFlow v9 on Cisco ASA 5520 not working [closed]
We have a PRTG Probe 192.168.4.4 in our office's Domain Controller, and we are trying to configure NetFlow on our leased Cisco ASA 5520 ver 8.2(5)
We have done the following on the Cisco:
conf t
...
CommunityBot
- 1
3
votes
1
answer
357
views
EEM to send email for problematic IP address
After a day of super-slow network performance, I found that one computer was both uploading and downloading gigabytes of data.
To find this, I had to pull up a list of the IP addresses by usage ,and ...
CommunityBot
- 1
1
vote
1
answer
55
views
How can different views onto same data model be defined in YANG?
RFC6020 contains the following statement "A NETCONF server may implement a number of modules, allowing multiple views of the same data" (my emphasis). I want to do exactly that, so that my NETCONF ...
- 136
2
votes
2
answers
316
views
Capturing traffic from multiple connections on a switch
Consider the traffic monitoring setup on the bottom of this page: https://www.ntop.org/pf_ring/port-mirror-vs-network-tap/
The two lines of a network tap are connected to a switch which merges the ...
- 88k
2
votes
3
answers
793
views
Arista switches- Email alert if interface status changes
I'm looking to be notified of interface state changes on my Arista switches without my manual polling of the logs. For example, tailing var/log/messages, I might see something like:
un 29 19:10:48 ...
CommunityBot
- 1
1
vote
1
answer
459
views
What bits does iftop count when calculating and displaying the network bandwidth [closed]
I've googled and read, and googled and read. Everything I've found makes reference to it counting IP packets, but it obviously displays Bits/Byte and packets come all manner of size.
What bits does ...
CommunityBot
- 1
2
votes
2
answers
609
views
Finding the available capacity on switch interface in bytes or bits
Below is the output from my "show interface " command
PE1.18:01:44#sh interfaces Ethernet 3
Ethernet3 is up, line protocol is up (connected)
Hardware is Ethernet, address is 001c.7374.3d95
...
- 2,426
4
votes
1
answer
376
views
Can I get what filters are applied to an interface via SNMP?
I have some firewall filters on juniper devices- ex3300s make up the majority of them. I've been looking for an oid that will let me associate an IFL with the filters that are on it, and I've yet to ...
- 101k
0
votes
3
answers
352
views
Read out down time of switch port
Is it possible to read out the time a switch port has been in down state on Cisco switches e.g. 2960x.
Br
Frank
- 101k
4
votes
2
answers
2k
views
Decoding wpa-psk traffic with Wireshark
I want to plot how much data each client is using from a wpa-psk protected access point (that I control). For that I intend to monitor all traffic for a couple of days. However I can't decode the TCP ...
- 101k
1
vote
1
answer
68
views
whats the best way to check if my API connection is SSL using network monitoring tools? [closed]
I have a Java based system and it is using an API for additional features, the API has a built-in SSL connection on you just have to enable it in the code, and I was able to enable it but I still want ...
- 101k
1
vote
1
answer
186
views
Sensor to collector communication from SPAN, Inline or TAP
I am trying to figure out which one of the three modes or all would support this. The sensor is a computer running fprobe and pushing UDP traffic (netflow v5) to an IP address in the network.
My ...
- 101k
2
votes
1
answer
2k
views
Send command lines to syslog server
I already can send each Linux command line to my syslog server. Now, I'd like to send each command line inserted onto my Cisco router to syslog server.
Is it possible? If yes, how?
- 101k
6
votes
5
answers
3k
views
How to check MPLS connections?
I monitor about 150 routers with MPLS links.
To check if connection is established, I'm pinging loopbacks visible only from WAN. If a loopback is not responding, I can see which link is not working ...
CommunityBot
- 1
1
vote
2
answers
165
views
Network fluctuation / delay monitoring between two nodes
Problem background: Our application communicates with multiple other nodes over SCTP. A few times in past issues were reported because of network fluctuation or too much delays that appeared for very ...
- 135
1
vote
4
answers
236
views
How to detect router from Windows 7? [closed]
From a Windows 7 box, connected to what should be a private network, what is the best / most foolproof approach to detecting a connected router? The end-goal is to prevent the private network from ...
- 133
0
votes
1
answer
269
views
Best practices for IP Flow monitoring [closed]
Current flow probes (using eg. IPFIX, netFlow v5/9, sFlow) are able to monitor flows defined at least by the tuple < source IP, source Port, IP protocol, destination IP, destination Port, source ...
CommunityBot
- 1
3
votes
2
answers
2k
views
Extract QoS Buffer Drops via SNMP
I am in the process of rolling out solarwinds for visibility of QoS performance using netflow and CBQOS to show QoS class usage. One thing I am unsure of is what type of monitoring is available on L2 ...
- 1,636