monitoring my network

chicom9 · #1 27th February 2007, 02:06 PM

Hi all,

I have a box thats running FC6 64 bit, w/ two network cards. So far, i dont have use for the second nic so its disabled. However, i am running into a problem. The NIC thats currently enable and working is generating huge amounts of traffict. (At least thats what i think) I can tell this because I can see the LED in my network switch going crazy. Also, my whole network will go down, and i cannot connect to the internet nor i cannot connect to my network shares. Now, my network is made of a windows 2003 box running file sharing, and just a test ad, and dns. Nothing major since its a home server just for testing purposes.
My Fedora Box is just used as my daily desktop. I had to disable NIC1 and enable NIC2 to get back my network. I wonder if there is something wrong w/ my NIC1 or is there some kind of malicious activity going on in my box???

PLEAse Help???

InKo · #2 27th February 2007, 02:27 PM

hi,

to check the network activity you can use ethereal
try also

Code:

lsof

to see the list of open files/ sockets etc on your system
and you can also check the running processes with top or ps!..

chicom9 · #3 27th February 2007, 02:36 PM

Thanks I will try that

pigpen · #4 27th February 2007, 03:26 PM

etherreal is now known as "wireshark". also, try "iptraf".

Foster_ua · #5 27th February 2007, 10:13 PM

tcpdump -i nic1 will help you

ibbo · #6 1st March 2007, 12:28 PM

I find net-snmp to be the one to use. Of course wireshark and lsof are good tools too.

But net-snmp and say scotty (tkined) have to be the best management/ monitoring tools around for you as they can monitor an entire network and not just the node you are on.

Ibbo

johno12345 · #7 1st March 2007, 12:38 PM

cacti is a pretty decent tool for monitoring and reporting snmp information, which not only covers network but cpu, disk and memory utilization.

chicom9 · #8 1st March 2007, 01:57 PM

so far i have tried tcpdump -i nic1 and wireshark, but i think tcpdump ofers more details. I donot see anything thats malicious.. i going to run it on nic2 will seee the results...

Foster_ua · #9 1st March 2007, 08:31 PM

cacti+snmp isn't diagnostic tool
graphics is really pretty thing but only for continious monitoring
for quick results and more information on net packets - tcpdump