Re: [CentOS] open source network diagnostic tools

[Tate Belden]

Personally, I'd start with Wireshark see what's happening now. Then setup
Nagios for longer term
https://www.nagios.org/

On Sat, Jun 11, 2022 at 4:14 AM lejeczek via CentOS 
wrote:

>
>
> On 08/06/2022 20:19, Christopher Wensink wrote:
> > Everyone,
> >
> > From time to time on our network we experience a pause
> > where it seems like everything just hesitates for a time,
> > this could be 2-10 seconds, then communications resume and
> > everything is normal again.
> >
> > I suspect that there one machine that is occasionally
> > sending out bad packets or is flooding the network when it
> > shouldn't, but I don't know for sure.  I've tried scanning
> > with angry ip scanner to confirm IP addresses are set and
> > communicating as documented. I've tried running captures
> > with wireshark to try to identify one culprit but nothing
> > is sticking out.
> >
> > I've tried tcpdump to see if something obvious is placed
> > there, but it's a flood of information and it's difficult
> > to tell what (if anything) is a problem and what is not.
> >
> > I'm also working on setting up icinga for monitoring all
> > servers to see if that provides insight.
> >
> > What other tools / tactics would you use to identify the
> > core cause of these kinds of intermittent pauses?
> >
> > Chris
> >
> Though I can not recommend any specific tools, a learning
> curve should be easy peasy, including tools/solution -
> unless you already looked into it & have it covered - in old
> days with Windowze NIC faulty drivers, OS own issues or
> intentionally provoked network stack misbehavior would/could
> put a device/NIC in the 'promiscuous' mode which would
> results in network "acts" in ways you describe.
>
> good luck, L.
> ___
> CentOS mailing list
> CentOS@centos.org
> https://lists.centos.org/mailman/listinfo/centos
>


-- 
Tate Belden

*NOTE: k...@casperarc.net  has been depreciated, please
use this address instead: wyo...@gmail.com *

"The Dungeon "

"We do not become enlightened by imagining figures of light, but by making
the darkness conscious."
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] open source network diagnostic tools

[lejeczek via CentOS]

On 08/06/2022 20:19, Christopher Wensink wrote:

Everyone,

From time to time on our network we experience a pause 
where it seems like everything just hesitates for a time, 
this could be 2-10 seconds, then communications resume and 
everything is normal again.


I suspect that there one machine that is occasionally 
sending out bad packets or is flooding the network when it 
shouldn't, but I don't know for sure.  I've tried scanning 
with angry ip scanner to confirm IP addresses are set and 
communicating as documented. I've tried running captures 
with wireshark to try to identify one culprit but nothing 
is sticking out.


I've tried tcpdump to see if something obvious is placed 
there, but it's a flood of information and it's difficult 
to tell what (if anything) is a problem and what is not.


I'm also working on setting up icinga for monitoring all 
servers to see if that provides insight.


What other tools / tactics would you use to identify the 
core cause of these kinds of intermittent pauses?


Chris

Though I can not recommend any specific tools, a learning 
curve should be easy peasy, including tools/solution - 
unless you already looked into it & have it covered - in old 
days with Windowze NIC faulty drivers, OS own issues or 
intentionally provoked network stack misbehavior would/could 
put a device/NIC in the 'promiscuous' mode which would 
results in network "acts" in ways you describe.


good luck, L.
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

[CentOS] open source network diagnostic tools

[Christopher Wensink]

Everyone,

From time to time on our network we experience a pause where it seems 
like everything just hesitates for a time, this could be 2-10 seconds, 
then communications resume and everything is normal again.


I suspect that there one machine that is occasionally sending out bad 
packets or is flooding the network when it shouldn't, but I don't know 
for sure.  I've tried scanning with angry ip scanner to confirm IP 
addresses are set and communicating as documented.  I've tried running 
captures with wireshark to try to identify one culprit but nothing is 
sticking out.


I've tried tcpdump to see if something obvious is placed there, but it's 
a flood of information and it's difficult to tell what (if anything) is 
a problem and what is not.


I'm also working on setting up icinga for monitoring all servers to see 
if that provides insight.


What other tools / tactics would you use to identify the core cause of 
these kinds of intermittent pauses?


Chris

--
Christopher Wensink
IS Administrator
Five Star Plastics, Inc
1339 Continental Drive
Eau Claire, WI 54701
Office:  715-831-1682
Mobile:  715-563-3112
Fax:  715-831-6075
cwens...@five-star-plastics.com
www.five-star-plastics.com

___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos