This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

monitoring who going through asl ?

Hi,

currently trying out asl and have a question.

Now and again the usage on my external nic goes extremely high. I want to find out the cause of this i.e. is it a user downloading a large file. But I dont know where to look or the best place to start.

I would like to be able to see what internal source ip's are going to what external destinations. And visa versa.

Can anyone help.

This thread was automatically locked due to age.

Parents

0 BarryG over 23 years ago

Did you look at the Connection Tracking page?
(Reporting - Network, and scroll all the way down to where it says "IP-Tables Connection Tracking")

Also, IPTRAF is a very nice utility for such things... you'll need to install the ASL pluspack, compile IPTRAF, and make a couple directories for it.

Note to Astaro:
it would be nice to include this in ASL, or in the pluspack. It's not very big.

Barry
Cancel
Vote Up 0 Vote Down

Cancel
0 IanMacey over 23 years ago in reply to BarryG

thanks for the quick response. What is the pluspack?
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 IanMacey over 23 years ago in reply to BarryG

thanks for the quick response. What is the pluspack?
Cancel
Vote Up 0 Vote Down

Cancel

Children

0 grimphyre over 23 years ago in reply to IanMacey

Yes. What is this ASL Pluspack ?
Cancel
Vote Up 0 Vote Down

Cancel
0 Rick_01 over 23 years ago in reply to grimphyre

http://asl.duncanthrax.net
Cancel
Vote Up 0 Vote Down

Cancel
0 andreas over 23 years ago in reply to Rick_01

Hi,
I just quote from Tom:

The PlusPack is a development suite for Astaro Security Linux.
It includes a collection of development tools, making it possible
to build other projects from source directly on the ASL machine.

URL: http://asl.duncanthrax.net

Have fun,
andreas
Cancel
Vote Up 0 Vote Down

Cancel
0 grimphyre over 23 years ago in reply to andreas

BTW.... I just noticed that there is 64MBit peak in our external interface and I really think it is quite impossible.

In that network segment there is only our router with 10MBit interface and 2MBit outworld link and astaro with 100MBit interface. So there shouldn't be any devices causing that kind of traffic.

I just updated astaro and I haven't noticed anything like this before.
Cancel
Vote Up 0 Vote Down

Cancel