Ubuntu :: How To Analyze Netstat
Apr 7, 2010I need to know what this means and what to do to fix this. code...
View 9 RepliesI need to know what this means and what to do to fix this. code...
View 9 RepliesDoes anybody know an application that sums up the printing from the page_log file and puts the summed amounts in another simple text file? Tried phpPrintAnalyzer but could not figure out how to set it up.
Running Ubuntu Hardy LTS server.
instructions on phpPrintAnalyzer?
I need a tool to analyse the output of sar command. just like sarg which analyses the log files for http , squid etc . I need a similar tool for sar output analysis.
View 3 Replies View RelatedI'm looking for an app that will analyze my system and report similar to device manager. I'm trying to find out what type of ram i have installed (ddr 266/300/400 pc 2700/3200) etc.
View 3 Replies View RelatedI am trying to make a script which will analyze jpeg images taken from a webcam. i can get a image easily enough but i can't figure out a way to get the images average brightness as a number.
View 1 Replies View RelatedWhere I work we're trying to create a mailbox where our employees sends messages to it and the mail server processess them. Much like the Support of some companies where you send an email a ticket is automatically opened, but instead we need to save the messages to the filesystem depending upon an identified ID in the message.
We're considering two options:
1) Identify by to: header
Messages are sent to 12345@domain.com or os+12345@domain.com, where 12345 is out customer identifier, and the mail server processess messages and saves them to:
/data/os/12345/Customer contact.eml
2) Identify by subject: header
Messages are sent to os@domain.com and the customer identifier is specified in the subject [12345] Customer contact.
We need to do some other verifications as the user (from: header) is authorized to archive messages to that customer, but this is another story.
I tried searching for something along the line of AMaViS and ClamAV filters but had no success.
We have seen with the release of Fedora 15, systemd is the new start-up services, which will replace SysVinit and Upstart on most Linux distributions. Here are some tips based on the order systemd-analyze, for analyzing the startup time of your OS.On commence avec l'option time, qui affiche le temps total de d�marrage de votre syst�me : (One starts with l' option time, which posts the total time of starting of your system: )
Code:
$ systemd-analyze time
Startup finished in 6385ms (kernel) + 3228ms (initrd) + 49335ms (userspace) = 58949ms
[code]....
For those with IT jobs, how do you handle security monitoring for your company?
1.How do you determine what to monitor-- The most vulnerable assets, most critical or something else?
2.What kind of data do you collect for security monitoring purposes?
3.What tools and techniques do you use to analyze the data?
I need to analyze the squid access log file for the purpose of my research.For that I need to obtain some correlation among time and the web site visited, machine ip and the web site name etc.It's better if I can draw a graph by analyzing the log file . I found some log analyzers but it didnt provide this.I need to obtain some cor-relation from this log file .
View 1 Replies View Relatedrubyripper starts ripping but then it seems it stops during the analyzation.No action noticable and it does not finish.The last message in the log is: analyzing the files for not matching chunks.I left it for hours and nothing happens.It happens with all formats and with all CD's I have.No error messages or other.With opensuse 11.2. there was no problem at all.
rubyripper version 0.6.0
Kernel: Linux 2.6.34-12-desktop x86_64
Distribution: openSUSE 11.3 (x86_64)
KDE: 4.4.4 (KDE 4.4.4) "release 7"
Does anybody have an idea or need any logfiles?A similar problem I have in k3b when ripping audio cd's. It hangs up during analyzation.
I install squid-graph 3.2 need to know:
On analyze page have:
This mean! cache sending to my users as total object 84Mb? and proxy server sending object 52Mb which are not cached yet to the users?
I am facing customer issue. Customer has got core file while running the server. Customer had sent core file and details from pstack, pmap and pldd commands.
View 1 Replies View RelatedI have a problem for which I imagined a radical solution. Okay, I have a script that uses Alltray's "menu" feature as an interface. It's working greatly, EXCEPT sometimes lxpanel (the panel and tray of LXDE) has a hiccup and restarts, at which point the alltray menu is still running, but the icon is gone from the tray.
I want to somehow test the screen for the existence of a color, a color that is likely only to exist in the icon I've chosen for the chat menu. If the color exists on my screen, then the script can continue to do nothing, but if the color doesn't exist, then that means the alltray icon with my custom icon has disappeared, at which point I should have my bash script close the alltray process and start it again.
How to accomplish the checking of my screen for the existence of a particular color? To simplify, I already have simple screenshot scripts (scrot is good for it), so it would be fine if I could simply analyze an image.
I need to learn how to analyze network traffic for attacks and while finding the attack seems easy in my case I need to identify what hes doing. I will be happy right now if you guys can answer my question. How to identify if an attack has brought the server down? I have packet captures of an attack in progress and I noticed that every now and then the attacker would do something weird and the server would start sending packets with just the RST packet sent in response. Normally I had been seeing the RST ACK flags set or the FIN ACK bits set to terminate a connection. So once again my question is how do I tell if the traffic indicates a server crash?
View 1 Replies View RelatedI am looking for tools for static/dynamic code analysis for embedded Linux system development (both device driver and user space apps) with ARM-based processor. We use Eclipse IDE and C++ lanuage for development. Does anybody have recommendation for tools to analyze code complexity? The tools is better to support McCabe complexity metric, however, we may also consider others. Does anybody have recommendation for unit testing?
View 1 Replies View Relatedhad some problems with setting up Linux on my virtual machine as I cannot connect with putty (connection gets refused) to it but now I guess I figured my problem out, just not the way how to solve it .If I do netstat -nap | grep :22 I get the following output:[[ see attachment ]]
Shouldn`t there be some kind of LAN IP instead of 0.0.0.0?Does anyone have a possible solution for that? Checked iptables and such, they are not causing it.
I am developing a node application and there is an option to set the process title (process name). This only sets it in some tools (like ps and top), but not in htop or netstat.
I found this article that explained how most applications do it, but it doesn't change in netstat.
That lead me to wonder where those programs are getting the process name. Would they be getting it from /proc/##/cmdline? (## being the PID of the process)
I figure messing with things in /proc is a bad idea (and probably not possible), so if this is where those programs are getting it, is there a way to change it?
I need the port 27015 to be open. I've opened it in iptables :
Quote:
iptables -A INPUT -p tcp -i eth0 --dport 27015 -j
But when i try :
Quote:
netstat -nan
The port 27015 do not appear as "LISTEN".
I've been experiencing some home web-server slowdown issues lately, and I wanted to see if it's a problem with the server itself. I'm not sure if this might be the problem, but upon checking netstat -tn, I see over 15 instances of the following:
[Code]...
where 192.168.2.9 is the server's local address, the local address port varies, and the foreign address is the server's web address. If anyone knows what might be causing this and/or how to fix i
I have question regarding netstat? When performing a "netstat -s" I receive the following information regarding dropped packets under IP:
IP:
93978695 total packets received
0 forwarded
0 incoming packets discarded
79472157 incoming packets delivered
65235033 requests sent out
29527 outgoing packets dropped
However if I run a "netstat -i" I have no dropped packets whatsoever: (apologies for the table format):
Kernel Interface table
Iface MTU Met RX-OK RX-ERR RX-DRP RX-OVR TX-OK TX-ERR TX-DRP TX-OVR Flg
bond0 1500 0 34326528 0 0 0 72755307 0 0 0 BMmRU
bond0:1 1500 0 - no statistics available - BMmRU
bond1 1500 0 28605491 0 0 0 20948952 0 0 0 BMmRU
eth0 1500 0 34199550 0 0 0 72755278 0 0 0 BMsRU
eth1 1500 0 126978 0 0 0 29 0 0 0 BMsRU
eth2 1500 0 97911 0 0 0 1 0 0 0 BMsRU
eth3 1500 0 28507580 0 0 0 20948951 0 0 0 BMsRU
lo 16436 0 34094225 0 0 0 34094225 0 0 0 LRU
I have an application that uses port 8080 all the time. One time, for some reason, it was taken by I didn't know what.
View 2 Replies View RelatedI've never seen the type of output from netstat and don't have a clue what it means.Quote:
tcp 0 0 :::8009 :::* LISTEN 31673/java
tcp 0 0 :::22 :::* LISTEN
[code]...
I have just installed a new clean version of debian. an hour later I have used the netstat to check connections and I see this :
The (italic) is me, but the first IP with 104.155. I have searched it on google and it says Google INC. Why is deb connected to it ?
somehost@delldebc2:~$ netstat -actun
Active Internet connections (servers and established)
Proto Recv-Q Send-Q Local Address Foreign Address State
tcp 0 0 0.0.0.0:43182 0.0.0.0:* LISTEN
tcp 0 0 0.0.0.0:111 0.0.0.0:* LISTEN
tcp 0 0 0.0.0.0:22 0.0.0.0:* LISTEN
[Code] .....
Is that rather strange or am I missing something. Firefox is obviously open and connected.
View 3 Replies View Relatedhow I cat to filter out information about Unix Domain Sockets from netstat output without grep? Is there some option for command (I not found it in man of netstat).
View 2 Replies View RelatedWhile running some live tests last week I saw an odd situation where netstat appeared to be displaying the wrong PID and process name for TCP connections. I'm trying to figure out if this is just a strange netstat bug or if it could indicate something odd is happening with our software.
We have a main program which establishes a number of connections, including connecting to a JMS server and listening/accepting a TCP connection. The main program also creates a child process which it uses to communicate with another server. On at least three occasions we saw a situation we saw netstat reporting all the expected TCP connections (correct ip/port for both source and destination), however the child process, instead of the main, was listed for the PID. The main process was still running but netstat no longer reported any TCP connections established by the main program. The main program continued to function correctly, the JMS communication continued to work and we believe the other TCP connection was functioning correctly despite the program supposedly not having any TCP connections.
I'm wondering if this could simply be a bug and/or obscure functionality of netstat that I don't understand which would cause netstat to report the child process as 'owning' the parents TCP connections. I don't know how this would happen or why the parent would continue functioning despite the problem otherwise.
I had a dream least night in which I was on my computer and I was typing the command Netstat -a in command prompt in Ms-Dos. And I was wondering why it looks so much like a Linux terminal command? This question persisted in my mind after I woke up. So what is the story about it?
View 3 Replies View RelatedWhile issuing the command netstat -M it shows netstat: no support for `ip_masquerade' on this system. But this system is used as a gateway and iptable rules are set for ip forwarding. Also internet is getting another machine through this machine. What about the message?
View 3 Replies View Relatedwith netstat i found a port with idle state, i google the meaning of IDLE:Idle, opened but not bound.What do you mean by bound?
View 2 Replies View RelatedWhen the centos is running a vpn server, there 's a client connecting. The connection can't be seen by netstat -tunp
View 4 Replies View Related