Sniff My Server

dave_kimberley · #1 17th October 2004, 10:21 AM

Hi there,

I have been searching arround for weeks now, but still have not found any information.

My FC2 box connects to the Internet via my LAN, I need to snoop another FC2 server I own over the Internet, however tcpdump works but will wait on the LAN.

Is there anyway to snoop a remote host over the Internet?

taylor65 · #2 17th October 2004, 02:45 PM

you could connect to your remote server with xnest or vnc, then run ethereal. all these apps are on the FC2 CDs. however, if you're running over a slow connection, xnest and vnc will be pretty slow.

Jman · #3 17th October 2004, 11:43 PM

For checking security I would start with an nmap scan. RPMs come with Fedora, and there is even a frontend GUI. You can scan host and it will show what ports are open, and a lot of information about what is running.

Ethereal will show what traffic is on the network. This may not help much if your server is at a remote location.

#4 17th October 2004, 11:57 PM

Install it via yum.

Code:

yum install nmap*

Also, a nice tool found at the nmap homepage is Nessus.