Questions tagged [monitoring]

This tag is suitable for questions about or involving network monitoring as implemented on network devices or monitoring tools used by network professionals. Examples: IP SLA, SNMP, Netflow etc.

Filter by
Sorted by
Tagged with
2
votes
2answers
493 views

How to determine which machine is eating bandwidth [closed]

Network setup: Router: Netgear FVS318N Switch: Netgear GS752TP There are two wireless APs connected to the switch, as well as about 15 wired devices, and about 10 wireless devices. Looking for a way ...
2
votes
1answer
756 views

Dell PowerConnect 5524 - SNMP OID for stack topology

I am looking for SNMP OIDs giving all information about the topology status. If directly connecting to the switch, I can find the following information : Unit MAC Address Software ...
2
votes
1answer
551 views

How to test which process that drops packets?

I simulated a Denial-of-Service attack by connecting two virtual machines, i.e. attack and victim machine. The attack machine sends lots of traffic (http) against the victim machine running an ...
2
votes
0answers
449 views

Do tools for building a traffic map from a pcap capture exist? [closed]

I'm essentially looking for a tool that has this functionality: SMART The tool was written by Cisco but hasn't been updated in almost a decade. I tried running it and while it works for small pcap ...
2
votes
0answers
843 views

Common Cisco Firewall SNMP performance counters [closed]

I'm looking for Cisco OIDs for monitoring Cisco ASA series. Is the CISCO-UNIFIED-FIREWALL-MIB enough? What are the statistics and status indicators I should gather? I'm interested in : Resource ...
1
vote
2answers
262 views

Is there any way to send out an IP directed packet?

Is there a way to send out a packet such that its path is predetermined? Basically, I want to attach an "IP map" of how I want it to travel. If so, what are the steps? Thanks!
1
vote
2answers
9k views

TCP Window Size Allocation and TCP Zero Window Errors

Greetings Everyone! My mind is about to explode as everyone is always blaming the network guys for disconnections and slowness in the networks, but Solarwinds Reports that all utilization in the ...
1
vote
1answer
103 views

Is letting routers generate traps on bgp changes a bad idea

In a largish (1M+) IP environment I am responsible for monitoring/alarming and guarding IPAM integrity. Seeing an opportunity to kill two birds with one stone, I asked the guys responsible for the ...
1
vote
1answer
462 views

SNMP protocol MIBs & OIDs

I am trying to understand SNMP protocol. I have clear understanding how SNMP works on network level. We can send UDP request to device, but on this device snmpd should listen for incoming requests. ...
1
vote
2answers
242 views

More Information from ICMP & ARP

I installed DEKSI Network Administrator Demo and when it is Creating Map, in Step 3 of 4. Searching and selecting hosts for placing on the map, it found IP address and Mac perfectly, but it also found ...
1
vote
1answer
590 views

mirroring-group not possible on Aruba switch

I am currently in the situation of needing to monitor several ports on a Aruba 2530-24G simultaneously from several other ports. Those are basically HP devices, right? A good solution would be a ...
1
vote
2answers
48 views

Restricted Youtube access

Is it possible to enforce from Fortigate a restriction on Youtube access? We want to allow Youtube access for some of our employees who work in Media, but we want to enforce some sort of rule or ...
1
vote
1answer
48 views

How can different views onto same data model be defined in YANG?

RFC6020 contains the following statement "A NETCONF server may implement a number of modules, allowing multiple views of the same data" (my emphasis). I want to do exactly that, so that my NETCONF ...
1
vote
2answers
143 views

Network fluctuation / delay monitoring between two nodes

Problem background: Our application communicates with multiple other nodes over SCTP. A few times in past issues were reported because of network fluctuation or too much delays that appeared for very ...
1
vote
1answer
561 views

How does a router monitor traffic between two devices on a switch

I recently set up a small business network, and am constantly learning more about how networking hardware works. It is my understanding that a Layer 2 device (Dell 48 port managed switch in this case) ...
1
vote
4answers
231 views

How to detect router from Windows 7? [closed]

From a Windows 7 box, connected to what should be a private network, what is the best / most foolproof approach to detecting a connected router? The end-goal is to prevent the private network from ...
1
vote
1answer
84 views

Is it possible to differentiate cisco ports on monitoring system via snmp?

I am managing some cisco switches in my monitoring software (zabbix), and it provides useful insights that I would like to monitor: Warning on link up / down Warning when ports are on half duplex ...
1
vote
1answer
106 views

Sensor to collector communication from SPAN, Inline or TAP

I am trying to figure out which one of the three modes or all would support this. The sensor is a computer running fprobe and pushing UDP traffic (netflow v5) to an IP address in the network. My ...
1
vote
1answer
2k views

Does Cisco-IPSLA work with Huawei-NQA?

I want to monitor udp-jitter using IP SLA (Cisco Router). The Destination Router was Huawei Router. I'm not sure whether Huawei Router doesn't support IP SLA responder. Is there anyway to use NQA with ...
1
vote
1answer
564 views

How to access the Cisco Catalyst 2960 Series switch port mirroring webpage/admin interface?

I have read the tutorials about how to send several command lines to setup port mirroring (e.g. source port, destination port). But before sending commands to the switch, I need a administration ...
1
vote
1answer
87 views

sniffing through my company's lan [closed]

I'm in charge of the network in my company and i have to check the visited websites.We have a edgeMAX router (firmware version 1.8) with DPI and enabling netflow exporting.DPI (as is it implemented in ...
1
vote
2answers
315 views

Destination port load on a SPAN session

I have created a bar chart in Java that will display the current percent load on a each destination port per SPAN session. I have a refresh time of 30 seconds using the show interfaces command to ...
1
vote
1answer
67 views

whats the best way to check if my API connection is SSL using network monitoring tools? [closed]

I have a Java based system and it is using an API for additional features, the API has a built-in SSL connection on you just have to enable it in the code, and I was able to enable it but I still want ...
1
vote
1answer
53 views

Actively host ip and port accessed in Cisco IOS

Is there a way to set up logging on a Cisco router to keep a log of all the host IP's and the ports successfully accessed the network and the last time port was accessed, and automatically garbage ...
1
vote
0answers
26 views

Meraki and Syslog-NG OSE [closed]

I've been struggling epically to export legible logs from my Meraki devices to a server running Syslog-NG OSE 3.30. No matter what source driver I use on the server, I see errors like this (...
1
vote
1answer
148 views

ARPs in WIFI Interface Monitor Mode

I set my WIFI interface to monitor mode. I did not expect to see any ARP requests. Can someone explain why there is ARP traffic?
1
vote
0answers
291 views

In a reboot/Shutdown event, would SNMP trap be sent before the event occurrence or after that? [closed]

When a device is getting ready to shut down or reboot, Would the SNMP agent send the trap notification to the destination host before the shutdown/reboot event, or after that? What's the general rule ...
1
vote
1answer
282 views

What bits does iftop count when calculating and displaying the network bandwidth [closed]

I've googled and read, and googled and read. Everything I've found makes reference to it counting IP packets, but it obviously displays Bits/Byte and packets come all manner of size. What bits does ...
1
vote
0answers
100 views

「Netscreen」 VPN UP/DOWN due to loopback address source monitoring

I am dealing with a problem with Netscreen VPN. Topology is basically Server Side ーー> (Agg2)Trust/Untrust(Agg1)ーー> ーー> Remote Office (Yamaha) 100.66.xx.0/24 ーー> Netscreen VPN ーー> Internet ーー> 100....
1
vote
0answers
2k views

Get interface input/output rate statistics over SNMP from Huawei switch

We need to monitor the download/upload bandwidth on interfaces on Huawei S5300 switches, and we need to do it with a specific monitoring system. This system can get information from a switch using ...
1
vote
0answers
122 views

Is it possible to extend Cisco's MIB tree?

One of the most notable feature of NetSnmp is the possibility to extend an OID tree running aribtrary commands using the extend and the pass persist methods. I was wondering if there is such a ...
0
votes
2answers
66 views

Monitoring URL requests on foundation's LAN

We are having a internet cafe with guests walking in and out. We would like to keep an eye on browsing traffic on LAN 192.168.2.0/24, because we don't want guests to visit wrong websites. In such ...
0
votes
4answers
143 views

Network traffic [closed]

I have a task to do research on network traffic analysis in cloud systems, but I'am not really sure what exactly means network traffic. Can you please explain it bit more. Thank you
0
votes
1answer
2k views

How do behave the AP during monitoring mode? [closed]

I want to know how to solve the communication with associated wifi devices when AP switch to monitoring mode. Because I want to use the monitoring mode without effects the mobile that was associated ...
0
votes
3answers
217 views

Read out down time of switch port

Is it possible to read out the time a switch port has been in down state on Cisco switches e.g. 2960x. Br Frank
0
votes
3answers
928 views

How can I monitor traffic matching a IP address?

I see this article: user@host> monitor traffic matching “port 22” no-resolve there can matching a port and I can matching arp too: user@host> monitor traffic matching “arp” no-resolve but, ...
0
votes
1answer
73 views

Monitor individual device traffic on Cisco RV042

I am able to monitor Total Traffic consumption on the Cisco RV042 router using SNMP and PRTG. I want to be able to monitor traffic used by each device on my net
0
votes
1answer
78 views

why doesn't WireShark show any traffic from invalid certificate https site? [closed]

i have tried mobile apps like HttpCanary and pc programs like wireshark still got nothing from the site !!
0
votes
1answer
461 views

CIR and EIR - how to test/calculate?

im wodering how to test CIR EIR between two localization? we have direct link between these locations and I got a question about CIR EIR How can I test/calculate it?
0
votes
1answer
468 views

PRTG - NetFlow v9 on Cisco ASA 5520 not working [closed]

We have a PRTG Probe 192.168.4.4 in our office's Domain Controller, and we are trying to configure NetFlow on our leased Cisco ASA 5520 ver 8.2(5) We have done the following on the Cisco: conf t ...
0
votes
1answer
243 views

Best practices for IP Flow monitoring [closed]

Current flow probes (using eg. IPFIX, netFlow v5/9, sFlow) are able to monitor flows defined at least by the tuple < source IP, source Port, IP protocol, destination IP, destination Port, source ...
0
votes
1answer
3k views

Finding Unmanaged Switches on the LAN [closed]

I need to find Unmanaged Switch on the network. How to do this? Which Application?
0
votes
1answer
55 views

snmpget for HP switch - ifType not found

I'm learning about fetching information via SNMP towards our HP switches. I'm trying to query a switch using the OID BRIDGE-MIB::dot1dTpFdbPort included with a known MAC address 50:65:f3:2e:c5:5c, as ...
0
votes
1answer
72 views

Best practices to build network flow monitoring

Recently I'm investigating the solutions for ip flow monitoring, and come across a lot of pages talking about different solutions and trade-offs between netflow, sflow, IPFIX, etc. In short, netflow/...
0
votes
2answers
235 views

How to monitor vlan using SNMP?

I am a newbie to building a monitor system using Prometheus and SNMP exporter, I have succeeded get metric from the physical interface, but I want to monitor VLAN on a trunk port, is that possible ? ...
0
votes
0answers
38 views

uncorrected snmp Qos value from cisco

hello i have a router cisco 1006 and i create a policy-map with to class policy-map CheckBand-BandPerUsr class BandPerUsr police cir 10000000000 class class-default police cir 10000000000 ...
0
votes
1answer
216 views

Netgear M4300: Is it possible to enable multiple destination ports for mirroring?

I have a Netgear m4300 12x12f. Using the web Console I'm able to use one global port for mirroring traffic from other ports. Is there a way to have different ports mirroring different traffic? I'm ...
0
votes
2answers
470 views

How to calculate traffic in bytes from sFlow datagrams?

I want to approximate network traffic in bytes by writing a sFlow collector that receives sFlow datagrams, parses them, extracts key information only and applies a formula that summarizes the traffic ...
0
votes
1answer
477 views

SNMP configuration on dell S5000 switch

I am setting up some monitoring tools for my works network and there are two core switches that I need to be monitoring all the time. I have snmp configured on the switch but when I try to add it as ...
-1
votes
2answers
546 views

Valid use cases for packet deduplication? [closed]

(On-the-fly) packet de-duplication is an advertised feature of some devices in which exact copies of packets can be allegedly filtered out at near line-speed. Ignoring the plausibility of this working ...