Network Monitoring

Contents 1 Linux 1.1 Ethereal 2 Windows 3 References

Linux

Basic network monitoring tools and example runs:

netstat -pnta   current TCP/IP connections
ifconfig        NIC configuration
arp             address resolution table IP > MAC
route           show IP routing table

tcpdump -ieth1 src port not 22 and dst port not 22
                dump TCP traffic

Ethereal

This example dumps packets on NIC eth1 to or from port 80 (webserver)

tethereal -Vx -ieth1 -f 'dst port 80 or src port 80'|less

Make a HTTP request on another machine:

wget -O- http://www.servername.dk

Windows

Basic network monitoring tools and example runs:

netstat -a      current TCP/IP connections
ipconfig /all   NIC configuration, including MAC
arp -a          address resolution table IP > MAC
route print     show IP routing table
ethereal        analyze traffic

tcpdump is also available for windows from http://www.winpcap.org/windump/

References

• http://www.smokinggun.com/projects/soundoftraffic/