Re: [expert] Proving networking issues...

2001-02-06 Thread Praedor Tempus

One easy to understand, graphical sniffer/traffic analyzer is etherape.  It 
will produce a display of all the active addresses (IP or MAC) in a given 
network domain and show traffic patterns by type (TCP/IP, UDP, etc) by color 
code and amount of traffic by line thickness.  It is gtk+ based and is 
simple.  For simply checking out traffic load, this would do it quite well.

dsniff and snort are raw packet sniffers (of the two I like snort, 
personally).

On Tuesday 06 February 2001 10:23, Wayne Stout you wrote:
 Greetings, everyone.

 I need some assistance in defending the recently added Linux server to
 my boss. Over the last few months, we've been having intermittent
 networking problems, and since the Linux server was the most recent
 addition (server-wise) to the network, it's getting the blame.

 So far, we've seen the NIS services die twice over a 3 month period and
 the NFS service on a seperate NCR Unix box died this morning. I can't
 see any reason why the Linux server would be "generating excess
 traffic", as the charges go.

 So, I need some way to prove the guilt or innocence of the Linux box.
 I've been looking around for decent network sniffers, but am at a loss
 for what I'm looking for or at. Is there a good How-to or article I can
 read to help me figure out if indeed I have managed to horribly
 misconfigure the server?

 Thanks in advance,

 Wayne

-- 
Against stupidity, the gods themselves contend in vain.




Re: [expert] Proving networking issues...

2001-02-06 Thread Lars Nordin

Add to the list tcpdump (CLI) and X-windows based ethereal.

As far as advice on what to look for, I can't give you much but you may want
to ask this on a more network oriented newsgroup (see deja.com for a list)
or mailing list.  I would recommend two things though - try to track down
why NIS and NFS died through the log files on both boxes; and if you think
traffic is the issue see if your hubs and routers can provide you with
traffic statistics to back this - all routers and most hubs (if they are
smart) provide network statistics.

- Original Message -
From: "Praedor Tempus" [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Tuesday, February 06, 2001 12:31 PM
Subject: Re: [expert] Proving networking issues...


 One easy to understand, graphical sniffer/traffic analyzer is etherape.
It
 will produce a display of all the active addresses (IP or MAC) in a given
 network domain and show traffic patterns by type (TCP/IP, UDP, etc) by
color
 code and amount of traffic by line thickness.  It is gtk+ based and is
 simple.  For simply checking out traffic load, this would do it quite
well.

 dsniff and snort are raw packet sniffers (of the two I like snort,
 personally).

 On Tuesday 06 February 2001 10:23, Wayne Stout you wrote:
  I've been looking around for decent network sniffers, but am at a loss
  for what I'm looking for or at. Is there a good How-to or article I can
  read to help me figure out if indeed I have managed to horribly
  misconfigure the server?
 
  Wayne