topic Re: Monitor network traffic in Operating System - Linux

Monitor network traffic

juno2 — Thu, 21 Aug 2003 05:49:57 GMT

Is there any linux command that can use to check / monitor the network traffic in / from the linux server ? I use RH8 . Thx in advance .

Re: Monitor network traffic

Claudio Cilloni — Thu, 21 Aug 2003 05:54:44 GMT

if you need a generic view of the network traffic you can use the 'iptraf' utility.

If you need a detailed traffic analisys there is 'ethereal'. It has even graphical interface.

run these command from root user.

ciao
Claudio

Re: Monitor network traffic

Alexander Chuzhoy — Thu, 21 Aug 2003 05:56:49 GMT

there is a utility called tcpdump
simply issue tcpdump at the command prompt

you can also use ethereal -a very nice gui utility -so you should run X before you start it.
It is linux version of network monitor

Re: Monitor network traffic

juno2 — Thu, 21 Aug 2003 06:11:32 GMT

Thx reply, in our RH 8 , there is a directory /usr/lib/ethereal , how can I run this command ? thx.

Re: Monitor network traffic

Stuart Browne — Thu, 21 Aug 2003 06:39:18 GMT

rpm -ql ethereal

will list a binary /usr/sbin/tethereal

this is a text based ethereal binary. As for the gui one, I am unsure what it's name would be..

Re: Monitor network traffic

Alexander Chuzhoy — Thu, 21 Aug 2003 06:47:19 GMT

to run ethereal
simply issue: ethereal
You should have X running

be sure that you have these RPMs installed:
ethereal-0.9.6-1.i386.rpm
ethereal-gnome-0.9.6-1.i386.rpm
(these are defaults of redhat 8.0)

P.S.
why don't you assign points to people who help you?

Re: Monitor network traffic

Huc_1 — Fri, 22 Aug 2003 11:12:34 GMT

/usr/bin/iptraf
/usr/bin/ethereal
/usr/sbin/tcpdump

All of theses are related to network monitoring
depending on distribution/setup the location could be different just do a

whereis iptrf
or a
locate iptraf
or
man iptraf
or
rpm -ql iptraf (as mention by Stuart Browne)

two more info sometimes you need to be root to run theses tools and theses also put your ethernet card in promiscuous mode

for general purpose I find iptraf does the job
for real hacking/sniffing tcpdump or ethereal.

hope this helps

Jean-Pierre

Re: Monitor network traffic

Huc_1 — Fri, 22 Aug 2003 11:38:22 GMT

ooppss

Rectification Ethereal and tcpdump could run in promiscuous mode.

I always belived they did by default but now if I run then and do a ifconfig I dont see them in that mode ?

will dig that out when I have more time

Jean-Pierre

Re: Monitor network traffic

Huc_1 — Fri, 22 Aug 2003 11:45:52 GMT

Just a last one I just found

xosview &

this is neat ...

Jean-Pierre