mardi 17 avril 2012
jeudi 12 avril 2012
nmap
scan réseau rapide
nmap -sP 192.168.1.0/24
scan avec listing des ports ouverts
nmap -p1-1024 192.168.1.0/24
nmap -sP 192.168.1.0/24
scan avec listing des ports ouverts
nmap -p1-1024 192.168.1.0/24
mardi 10 avril 2012
ntop
manager@ubuntu-416:~$ ntop start
Tue Apr 10 15:59:28 2012 NOTE: Interface merge enabled by default
Tue Apr 10 15:59:28 2012 Initializing gdbm databases
Tue Apr 10 15:59:28 2012 **ERROR** ....open of /var/lib/ntop/prefsCache.db failed: File open error
Tue Apr 10 15:59:28 2012 Possible solution: please use '-P <directory>'
Tue Apr 10 15:59:28 2012 **FATAL_ERROR** GDBM open failed, ntop shutting down...
Tue Apr 10 15:59:28 2012 CLEANUP[t3077826240]: ntop caught signal 2
Tue Apr 10 15:59:28 2012 THREADMGMT[t3077826240]: ntop RUNSTATE: SHUTDOWN(7)
Tue Apr 10 15:59:28 2012 CLEANUP[t3077826240] catching thread is unknown
Tue Apr 10 15:59:28 2012 CLEANUP: Running threads
Tue Apr 10 15:59:28 2012 CLEANUP: Locking purge mutex (may block for a little while)
Tue Apr 10 15:59:28 2012 CLEANUP: Locked purge mutex, continuing shutdown
Tue Apr 10 15:59:28 2012 CLEANUP: Continues
Tue Apr 10 15:59:28 2012 PLUGIN_TERM: Unloading plugins (if any)
Tue Apr 10 15:59:28 2012 CLEANUP: Clean up complete
Tue Apr 10 15:59:28 2012 THREADMGMT[t3077826240]: ntop RUNSTATE: TERM(8)
Tue Apr 10 15:59:28 2012 ===================================
Tue Apr 10 15:59:28 2012 ntop is shutdown...
Tue Apr 10 15:59:28 2012 ===================================
Il faut le lancer avec les droits root
sudo ntop
Puis enfin accéder via un navigateur
http://@IP:3000
samedi 7 avril 2012
tcptrack
SYNOPSIS
tcptrack [ -dfhvp ] [ -r seconds ] -i interface [ filter expression ]
DESCRIPTION
tcptrack displays the status of TCP connections that it sees on a given network interface. tcptrack monitors their state and displays information such as state, source/des- tination addresses and bandwidth usage in a sorted, updated list very much like the top(1) command. The filter expression is a standard pcap filter expression (identical to the expressions used by tcpdump(8)) which can be used to filter down the characteristics of TCP con- nections that tcptrack will see. See tcpdump(8) for more information about the syntax of this expression.
OPTIONS
-d Only track connections that were started after tcp- track was started. Do not try to detect existing connections. -f Enable fast average recalculation. TCPTrack will calculate the average speeds of connections by using a running average. TCPTrack will use more memory and CPU time, but averages will seem closer to real time and will be updated more than once per second and may be more accurate under heavy load. The number of times per second that averages will be recalculated in fast mode is a compile-time set- ting that defaults to 10 times per second. -h Display command line help -i [interface] Sniff packets from the specified network interface. -p Do not put the interface being sniffed into promis- cuous mode. -r [seconds] Wait this many seconds before removing a closed connection from the display. Defaults to 2 sec- onds. See also the pause interactive command (below). -v Display tcptrack version
INTERACTIVE COMMANDS
The following keys may be pressed while tcptrack is run- ning to change runtime options: When paused (via the p command) no new connections will be displayed, however tcptrack will still monitor and track all connections it sees as usual. This option affects the display only, not internals. When you unpause, the display will be updated with all current information that tcptrack has been gathering all along.
EXAMPLES
tcptrack requires only one parameter to run: the -i flag followed by an interface name that you want tcptrack to monitor. This is the most basic way to run tcptrack: # tcptrack -i eth0 tcptrack can also take a pcap filter expression as an argument. The format of this filter expression is the same as that of tcpdump(8) and other libpcap-based sniffers. The following example will only show connections from host 10.45.165.2: # tcptrack -i eth0 src or dst 10.45.165.2 The next example will only show web traffic (ie, traffic on port 80): # tcptrack -i eth0 port 80 sources
monitor, network
Liste de logiciels permettant de monitorer les interfaces réseau
iperf
ipfm
cbm
ibmonitor
pktstat
mactrack
MRTG
Cacti
sources
http://www.ubuntugeek.com/bandwidth-monitoring-tools-for-ubuntu-users.html
http://e1ement2048.wordpress.com/2007/10/26/herramientas-de-monitoreo/
IPTraf
EthStatus
Trafshow
iperf
ipfm
cbm
ibmonitor
pktstat
mactrack
MRTG
Cacti
sources
http://www.ubuntugeek.com/bandwidth-monitoring-tools-for-ubuntu-users.html
http://e1ement2048.wordpress.com/2007/10/26/herramientas-de-monitoreo/
vendredi 6 avril 2012
Inscription à :
Articles (Atom)









