Tag Info

Wireshark will work if you can span a gateway connection in order to see all the PCs traffic. Otherwise, you'll only see your own. If your PCs support SNMP, I think your best bet will be a tool like Cacti. This way you run Cacti on a central PC/server, which then polls the other PCs for interface information and graphs the resulting interfaces for ...

I would suggest that you try Wireshark Please note that Wireshark is quite advanced, and so may take a bit of getting used to. I have not used it for a few years, but it should still be perfect for what you are after - if not a bit too full of features. Information about Wireshark and how to use it can be found at the Wireshark homepage.

Well, for all those tcpdump fans =) RUN ALL THESE COMMANDS AS ROOT !!! Obtain root in a terminal with sudo -i sudo -i To capture the RAW packets ... sudo tcpdump 'port 80' -w /tmp/http.log & This will capture all the raw packets and write them to a file, http.log Run your application. It obviously helps if you do not run any other applications ...

Indeed there is a way, using the wireshark filters. But you cannot filter directly by process name or PID (because are not network quantity). You should first figure out the protocols and the ports used by your process (the netstat command in the previous comment works well). Then use wireshark to filter the inbound (or outbound) port with the one you ...

Wireshark is the superb tool for doing this. And HERE is the list of all the tools you'l ever need, such as: BWM - BandWidth Monitor port scanner A tool to send magic Wake-on-LAN packets script that quickly measures network device throughput etc... I also found a lot of bandwidth monitoring tools for Linux HERE.

try running the process your interested in under strace. strace ping www.askubuntu.com will give you some very detailed information about what your process is doing. As a process can open up any ports it wants to anywhere, using a predefined filter you may miss something. Another approach would to use a stripped down virtual machine or a test machine on ...

Just an idea: Is it possible to bind your application to a different IP? So that you can use the usual suspects (tcpdump...) Tools for applications which are not capable of binding to another ip: http://freshmeat.net/projects/fixsrcip fixsrcip is a tool for binding outgoing TCP and UDP client sockets (IPv4) to specific source IP addresses on ...

This is a dirty hack but I'd suggest either a divert or a log target with iptables for a given UID. eg: iptables -t nat -A OUTPUT -p tcp -m owner --uid-owner $USER -m tcp -j LOG iptables -t nat -A OUTPUT -p udp -m owner --uid-owner $USER -m udp -j LOG It might also be worth looking into something like '--log-tcp-sequence', '--log-tcp-options', ...

Well you can tell for sure if your kernel was compiled with USBMON by running: grep CONFIG_USB_MON /boot/config-`uname -r` In my case, I see CONFIG_USB_MON=y as the response... This means it's built directly into the kernel instead of as a module. I built my own kernel but to my knowledge, the .config used stems from a Maverick kernel. I don't have a ...

+1 on wireshark that really is a wonderful tool (and @Beck you can use Statistics -> Conversations or Statistics-> Endpoints to get a summary of traffic). You may also find Etherape to be useful. That gives you a realtime graphical representation of where most traffic is coming/going from. However do bear in mind that whichever tool you use to measure the ...

The Ubuntu wiki page on Repositories states: Repositories make it very easy to install new software onto Ubuntu using an Internet connection, while also providing a high level of security, as each program available in the repositories is thoroughly tested and built specifically for each version of Ubuntu. You won't have to worry about Transmission or ...

Building on the answer by ioerror I suspect you can use iptables --uid-owner to set a marker on the traffic, and then you can ask wireshark to capture only traffic with that marker. You might be able to use a DSCP (differential services marker), flow id or a qos marker. Or indeed you could use this to send those packets out a different interface, and then ...

Usbmon is directly compiled in the ubuntu kernel ( not as a module ). I tested on maverick but you can confirm that on 10.04 doing this. Go to the 'config' folder of your kernel: cd /usr/src/linux-headers-<yourversion>-generic/include/config Search usbmon configuration: grep -rn "CONFIG_USB_MON" * If your output is something like this: ...