my servers are configured with:Ubuntu 10.10 server 64bit;Lighttpd MySQL-Server I need to make graphs for traffic (bandwidth usage) and cpu load every month. I tried to configure mrtg but after 48h, it didn't produce graphs.(I can't install apache2)
[Code]...
I'm running ASSP on Ubuntu 10.04.1 it's mostly working fine. I have one problem which has been bugging me for some time. I don't want to filter outbound mail, but if I can relay (proxy) my outbound mail through ASSP, then it can automatically add to the whitelist.
As ASSP is a proxy, I need a server to send it to once ASSP receives it. I've tried my ISP, but this failed and they weren't willing to confirm if a connection attempt was received at their end.
Current setup
Inbound
mx -> router -> ASSP -> Exchange 2003
Outbound
Exchange 2003 -> mx
I'd like to setup outbound as either
Exchange 2003 -> ASSP -> <ISP> SMTP relay
Exchange 2003 -> ASSP -> <relay running on Ubuntu eg postfix>
Can anyone help me with troubleshooting steps or a better suggestion for how I can set this up. I'd love to know why my ISP setup didn't work, but I don't know a tool for monitoring IP traffic in Ubuntu SE, in windows I use Wireshark is there any equivalent I can setup for Ubuntu or a tool I can use in windows which will show all traffic, Ubuntu and windows server are on the same netgear switch, not sure it's smart enough to copy all traffic to another port for monitoring.
I have a UBUNTU server 10.04 LTS with 3 network interfaces (eth0,1,2) with eth0 is connected to my lan and others connected to two different ISPs , I am looking for a very flexible and complete monitoring tool which can monitor all of the traffic of incoming and outgoing of any interface and SPECIALLY can show me which local client made connection to which interface for connecting to internet in online mode not offline and it is good to have online web base interface I mean the interface shows the measured data in real time mode. I fount some tools like iftop and iptraf and many others in this url: http://www.ubuntugeek.com/bandwidth-...for-linux.html but non of them are suitable for my net I mean none of them have good web real time data and non of them shows "which local client made connection to which interface for connecting to internet".
View 2 Replies View RelatedI am using CentOS 5.4 and did a yum install of cacti. I installed all the necessay packages, like net-snmp, php net snmp and all that. Everything else works but I can't for the life figure out how to monitor traffic on eth0. I do not have any SNMP Interface Statistics or alike in either the Associated Graph Templates or Associated Data Queries.
Heres the output of "snmpwalk localhost -c public -v2c" , SNMPv2-MIB::sysDescr.0 = STRING: Linux xxx.xxxx.net 2.6.18-164.6.1.el5xen #1 SMP Tue Nov 3 17:53:47 EST 2009 i686
SNMPv2-MIB::sysObjectID.0 = OID: NET-SNMP-MIB::netSnmpAgentOIDs.10
DISMAN-EVENT-MIB::sysUpTimeInstance = Timeticks: (7515443) 20:52:34.43
[Code]...
I am trying to monitor the interfaces on the local computer only.
I have a service, which calls other services. I need to verify that my service is hitting the right end points of the other service, since the end points of the other dependent service are specified in configs, and are different for different stages - development vs production. Is there any tool which can tell me what end points are being contacted from my host?
View 1 Replies View RelatedIs there a program that monitors and displays 'who' is on your wireless Internet signal that one may not be aware of? Like, the ability to see when someone that you don't know is accessing your locked wireless?
View 9 Replies View RelatedWhich is best server monitoring (Traffic ) tool ?
Can you provide some form of monitoring on this server or recommend any server-side applications that could monitor the status, in high detail, including traffic, etc?
I was reading a magazine article today which was a discussion of internet detective work for tracking down ip addresses which attempt an ssh login to your machine. I have never really paid much attention to network security since I only run a small home network. I have WPA encryption and a firewall on my router. But while reading this article, I remembered that I myself has seen log files in the past that inidicated someone somewhere had attempted to log into my machine (attempts all failed). This had happened a few times, but I never really considered it a threat.
But, the more I read about home computers becoming "zombies" for criminals, I guess I am getting a little paranoid in my old age, particularly since my wife does quite a bit of business on the net with credit cards. I have four computers connected to the net and each other on this network, and would like to be able to easily detect attempted log ins and deal with them quickly.
So my reason for posting is to ask if someone could recommend a novice-friendly application for monitoring traffic to check this intermittently. I have read bodhi.zazen's excellent tutorial on snort, but I it appears to be written for large lan's or web servers and is over-kill for a small home network.
I want to know that squid in 5 min ago and 1 hour ago how much traffic transferred for monitoring purposes?? where can I get this info from running squid? of course I get I have to note that access.log is disabled for some reasons.
View 3 Replies View RelatedI've read up some of the posts on this forum, but can't seem to find an answer. I have a web service within an Apache Tomcat instance installed on a Redhat linux server. I only have shell access to the server, and need to monitor outbound network traffic from my web service. Is there a unix command that will allow me to monitor all outbound traffic? I'm thinking fiddler, but a unix version? I've heard of things like ntop and iptraf, but I don't think those will help me in this instance.
View 2 Replies View RelatedI'm looking for a monitoring tool like ntop, but can preserve statistics for http traffic.
View 1 Replies View RelatedRecently I notice that when I'm connected to an vpn server (pptpd) and I'm using it as a default gateway my download and upload speed decreases almost to the half of the usual speed. I made a test using iptables in order to count how much GRE packets are generated (except the real traffic itself) in that way:
Code:
iptables -I INPUT -p gre -j ACCEPT
iptables -I OUTPUT -p gre -j ACCEPT
iptables -I FORWARD -s 172.16.10.101 -j ACCEPT
iptables -I FORWARD -d 172.16.10.101 -j ACCEPT
The first 2 rules match all GRE packets between the pptpd server and client, and the next rules - the traffic between the server and the client.
When I turn the counters to zero and begin to generate traffic (to browse, to download etc.) I see that the GRE packets are even more than these in the FORWARD chain.
So, my question is first of all is my test correct and is it true that so much gre traffic is being generated during the browsing (it becames clear that the traffic is double than if the pptpd wasn't used as a gateway) and if yes - can that traffic be reduced?
I have two Red Hat entreprise Linux 5 servers running the same applications, my goal is to load balance the incoming traffic between these two servers without adding an additional hardware as load balancer, the incoming traffic is basically Web traffic and on the servers, Apache and PHP are running. Red Hat solutions that I found are:
1- LVS
2- Piranha
3- Red Hat cluster suite.
Can LVS run on one of the real servers (or both servers, for redundancy issues) and load balance the traffic between its server and the other one? If yes, will LVS has a big impact on the CPU/memory usage? How can I estimate this usage if I know how much traffic is coming and the HW specs?
Can I install Red Hat cluster suite on these two servers, and configure it in a way that the virtual IP is on different server for different request (taking in consideration that the same session will be always served by the same server)?Finally, is there any other/better solution that can fit my requirements to load balance the traffic without additional hardware?
I am in serious situation involving PPTP protocol VPN in Debian 8 Jessie stable. I recently became a paid VPN subscriber. Using PPTP; Is there a way to automatically route all traffic through ppp0? Im getting the vpn service killed (ip address goes back to normal unmasked state) whenever there is a power outage (modem reset) and there are alot of those where I live, Im going to get astabilizer and I need a software solution for the situation as well. Theres gotta be a way to route all traffic through the VPN route ppp0 . I tried adding persist and maxfail 0 to the pptp config file but it did not do what i wanted.
Here's my peer configuration file :
pty "pptp blabla.net --nolaunchpppd"
name blablabla
password blablabla
remotename PPTP
file /etc/ppp/options.pptp
require-mppe-128
refuse-eap noauth
persist
maxfail 0
On a second note, its clear to add that I basically need a way to also auto load the line
pppd call blabla.net
and
route add default dev ppp0
On system startup by default so the computer does not use "Wired" connection ^at all^ when not through ppp0. Any other way of not losing VPN anonymity ever due to hardware malfunction.
Is there a way to do this? Ive looked on the net and everything seems like its either from the nineties or can fry my pc , Im no debian expert, less than a year at linux..
Need it to use wired only if ppp0 is being used so if its no vpn, no connection at all period,
I am using KVM and created four guest Operating systems on it. The server host is Ubuntu 10.04.I am using 4 websites in a reverse proxy environment. One of our website is running on CentOS VM. Right now there is no traffic on the website static HTML pages. I do not have any clue as why it was taking longer time to be accessed.
View 17 Replies View RelatedI switched on bandwidth monitoring on my Ubuntu Server via Webmin on interface eth1. Unfortunately this has filled my disk by writing huge syslog, debug and kernel.log files. How do I switch it off? I can't see a way of doing it in Webmin.
View 1 Replies View RelatedI have been running a webserver for a time now. And for fun I thought I would use Nagios for monitoring it. But the installation instruction says install this on webserver01 and that on webserver02. I only have one server and want to monitor it remotely from a simple browser. Is this possible or does Nagios need at least two separate servers? Can't it just run it on my one server?
View 1 Replies View RelatedI have a asterisk server running on my ubuntu 10.10 server box. I also have a zabbix server monitoring my networks. Asterisk have the possibility to show very interesting statistic with SNMP. But I cannot managed to set it up. This is the result i get when I try to get the version information with snmpwalk:
[Code]...
i was wondering if any of you knew of any server application software as shown here:URL...
View 3 Replies View RelatedI didn't setup our old system but that server has since been retired due to hardware failure, but we have some new webervers, and a new postgtres database server in place which I need monitoring. Some items include database size, transactions per second, io stats, memory monitoring, or as the DBA put "anything I can get". We had used CACTI in the past for these items, but I didn't do the setup and sondering if that is what is recommended, or something else. I am looking at groundwork open source which include nagios, etc. but figured I would consult the uforums since all these servers are running userver 9.x and 10.x .
View 3 Replies View RelatedAnybody know of a good server health/status/performance monitoring apps? I have only used cacti never really tried anything else.
View 9 Replies View RelatedIt is vital to get a useful server performance monitoring tool that prevents growth related performance issues. Moreover, it should offer long term capacity planning and trend analysis along with detecting performance issues and unwanted outages.
View 3 Replies View RelatedI really think that Ubuntu Server should by default have SMART monitoring enabled, and possibly prompt for a notification e-mail address (and SMTP server details if required) for SMART notifications to be sent to.
View 1 Replies View RelatedI am looking for some monitoring tools (such as disk usage,memory usage, cpu,etc) for my linux machines. I came across two tools, cacti and splunk.Which one is better ? It will be nice if you can also let me know the reason.
View 8 Replies View RelatedI'm looking for some sort of a way keep track of all of my users that are logging in to my server (centos 5), what I mean is this: at our firm we outsource some of our work (programing), now all of the developing is done under our servers, what I'd like to find is a way of taking all of the users log on time and display by days/weeks/months - so I could see how much did everyone had put in. Another thing that I'm looking for is a way to monitor an ongoing session and record user activity, now I've seen ObserveIT, but it doesn't support Linux agents as of today.
View 7 Replies View RelatedI have a number of computers on a LAN. There are 3 laptops and 1 desktop, all running windows. I also have a Ubuntu server in the garage which servers up files to all those on the LAN. The server is not visible outside of the LAN for security reasons. Now, I want to track all traffic from any computer in my house that is coming and going in and out from the inter-tubes. I do not want to add this as a service to my current server as (a) it is behind the LAN and (b) I don't want to mess with security issues with that server.
I think I could set up a computer (an extra) which is between the modem and the router with two ethernet cards which would be able to monitor all traffic coming and going. This computer would, obviously, be exposed to all potential attacks as it wouldn't be behind the router's firewall. I'm not sure exactly how that would like or what software to use.
My kind isp had set up a authoratitive dns server that can't be cancelled that points to the wrong ip address. Hence I need to take all the traffic going into server A at the ip address aa.aa.aa.aa and send it all onto server B at ip address bb.bb.bb.bb. After much head scratching, I managed to achieve it as follows:- On the server at ip address A, set up following :-
iptables -t nat -A PREROUTING -d aa.aa.aa.aa -j DNAT --to bb.bb.bb.bb
iptables -t nat -A POSTROUTING -d bb.bb.bb.bb -j MASQUERADE
What is the setup required in order for a 2 NIC machine to only forward traffic ?
I am planning to set up a machine between the LAN and Router like this:
LAN <--> machine <--> router <--> internet
This machine will only forward traffic. I will use it with ntop, squid, maybe snort
or maybe Untangle if I find it satisfactory.
Is my scenario fiable ?
I want to forward traffic, use ntop and squid on it.
I know this has probably been solved multiple times, but I've searched the forum to no avail. I have a PPTP server setup properly with all ports forwarded correctly. A remote machine can connect and authenticate just fine. They get their IP assigned and everything.
The problem is that no traffic is being routed through the tunnel. Or, rather it is but the server doesn't seem to handle it. In a web browser I just get an error message. On a windows client I ran ipconfig and found a gateway address had not been assigned through the VPN tunnel. Could this be the problem? If so, how can I fix it?
I am running Ubuntu Server 10.10. I have installed OpenVPN using this guide I have set up everything correctly as this guide says, but I am having problems with the config file. I want to securely route all traffic on the client to the server, how ever the server will not start. My config is below:
Quote:
#################################################
# Sample OpenVPN 2.0 config file for #
# multi-client server. #
# #
# This file is for the server side #
[Code]......
The servers ip is 10.0.0.65 and I want to assign the clients the ip range of 10.0.0.200 to 10.0.0.20 When I try to start the server I get the message Fail.