I have tried to understand these TCP traffic and NAT network but not sure if what I write is correct. Refer to the TCP traffic in cap1a.cap and cap1b.cap. They were captured on the two network interfaces of computer A, and record Network address translation (NAT) traffic that is propagated between network 45 and network 3 by computer A. Figure 1 shows the network configuration.
View 19 Repliesi have a vpn and want to test the way traffic goes when i connect and disconnect vpn try some stuf, how can i see where my info is transiting , i want to test my vpn reactions to changes ill do.
View 1 Replies View RelatedAre there any routers out there that allow for traffic logging? I'm not just looking for URLs, but I want to capture the actual traffic (filtering down of course for specific key words, etc...)
View 1 Replies View RelatedI have a questions about protecting my network. My parent's have rented out my room, since I'm going to college, and I was wondering if there was a way to monitor the traffic that is going on in my network. Once the guy moved in, the wireless connection speed drastically decreased. I was barely able to sure the internet on my laptop. I currently have about 8 devices connected to my network. I am running a wired connection for my desktop so I don't feel any lag, but everything else runs on wifi.
View 1 Replies View RelatedI am using OPEN VPN in order to connect to a Canadian VPN server.I want ALL internet traffic to ONLY use the VPN connection and no traffic shall pass through my local ISP under any circumstance.In the event the VPN disconnects, I DO NOT want any internet traffic automatically sent via my LOCAL ISP connection. Can I simply disable my LAN network adapter in windows AFTER the vpn is connected? (since vpn uses its own TAP adapter?)
View 2 Replies View RelatedHow to view all network traffic on your router not just your computer? Using wireshark. Window 7 and Ubuntu.Without using any enhancements like airPcap or Turbo cap.
View 4 Replies View RelatedMy first time attempting this so excuse my wrong use of terms..i believe its load balancing...new company site is going to have 2 separate connections:
con 1: 15 up/2 down coax connection
con 2: 6 up/ 6 down dish
con 1 needs to simply have http and https traffic.
con 2 will have security surveillance, SNMP, and VoIP (PBX)
the hardware i know that will be at that location when i fly up there is a Sonicwall TZ210 and a 48-port Netgear gigabit...where do i start?
check the traffic produced by different hosts in a local network. In other words: which hosts uses how much of the bitrate.For example: We have a wifi network with four computers connected to. Lets say one is running skype, one is surfing in the internet and both left are just in idle mode. Is there a way to monitor the use of our bitrate such that I could see:"Ahh IP 10 is using 80%, IP 11 is using 10% and IP 12 and 13 are using 5% each on average!"
View 3 Replies View RelatedI am supporting a small call center of all Win7 machines. There is no server in house as everything is web based. Anyway, we want to find the bandwidth hogs and programs that I am used to using require servers for monitoring web traffic.
Are there any devices or software that is not a fortune that can give details on bandwidth usage?
i need to monitor the traffic on a multi users wireless route
View 8 Replies View RelatedI keep getting warning on bandwidth usage , I'm using a dir-615 routers xp on all machines . The one pc that i use to d/l with I have the torrent monitor on and shows little traffic. Ive heard of a few pieces of s/w but these require software to be installed on all boxes Id like to be able to monitor from one box if possible ??
View 2 Replies View RelatedSo a BT home hub is a very cheap router, so it seems. And - if you connect a quite a lot of eq to this router, it starts crashing. "It can't handle the traffic.". But what does that mean? Why can it handle the traffic for a while and after a few days it can't anymore. And lets say - some of the eq doesn't really work on the external network, it works on the internal network, and it doesn't need the internet to work for proper functionality. So - what is important then? Which specifications are the important ones?
View 2 Replies View RelatedWe have a small download limit every month and keep ramming into only days into our billing period. I am trying to identify the culprit but need to find a way to log the traffic of individual IP address (which are all static) on the network to figure out where all the bandwidth is going. Any (preferably free) application that will allow me to monitor this?
Network Infrastructure:
Modem connected to NetGear N2000 (older model) Router 192.168.0.1
Family Desktop - 0.2 (Ethernet)
My Desktop - 0.3 (Powerline Ethernet)
Brothers Laptop - 0.5 (Wireless)
My PS3 - .0.30 (Wireless)
iPods - (Wireless)
Router only tells me when someone is on and can track total network traffic usage not individual hardware.
I wonder if there is a free programme that will let me look at network traffic/activity on my network, i'm having real issues with with access and the slow down of the network. Unfortunately my switches are not managed.
View 2 Replies View RelatedI have a computer on my network I would like to use for media streaming. I would like to block all incoming/outgoing internet traffic and keep all network traffic on this computer local. Is this even possible? Can I also easily restore it if necessary? The computer is running Windows 7.
View 4 Replies View RelatedI have a 2003 standard machine with networking issues. the nic shows that it is connected and it received the correct DHCP ip from the router but i can't ping the router or any other ip on the network.i ran a TCP/IP fix, Winstock Fix, LSP Fix, checked the services that starts up, checked the startup programs, turned the firewall off, checked in advanced settings on the nic if the correct order is there. the funny thing is that in safe mode with networking it works like a charm but not when i boot in to windows normally.If i ping the router it just shows destination host unreachable.
View 3 Replies View RelatedWe currently have a 3/3 Etherloop. We dont have any internal IT as we are still small and while not a networking guy I can at least understand what is going on. Right now at peaks we are hitting 100% utilization.
We run a call center in house so I am trying to determine at the very least how much of this traffic is from voice data compared to everything else.Was running through our networking configuration and it just seems off to me. The following is the flow.
-Etherloop Demarcation >
-Cisco Integrated Access Device >
-D-Link DIR 655 Wireless Router >
-24port HP Procurve switch >
-24port HP Procruve switch >
Everything up to the first switch is a single line. The first switch has all ports running out except 1 which goes to the second switch. The second switch runs out to machines as well.
I am at the networking level where I understand a switch but have no idea what the IAD really does between the etherloop modem and the wireless router.
For some reason I feel like the router should not be setup in that manner and should be off of the switch. With the cisco IAD running directly to the first switch. So my 2 big questions are.
1. Does this setup even make sense.
2. Whats the easiest way to monitor traffic, at the very least it would be nice to see real time up/down and be able to log in. Then I guess using ports figure out what is being used by voice. My first guess was just putting a machine between the IAD and first switch and monitor and log the traffic.
I have created a new sub-interface on our ASA 5520 for guest internet access.
My goal is to allow access to a few specific services hanging off some dmz interfaces on the same firewall and full unrestricted access to the internet only. Everything else should be out of bounds.
The order of the rules I plan to setup on the guest interface inbound are:
#1. <rules to allow access to specific services in the dmz>
#2. <block any ip access to the entire private network ip address space>
#3. <permit ip any any>
#1. These rules will give access to the guest user to services located in the dmz
#2. This rule will block all access to any services in the private ip address space (thus blocking access to all internal services)
#3. This rule is to allow access to any other services i.e. the internet.
Is this the best way to achieve my goal in the most secure way or is there a better way? i.e. is there a way to force the traffic by default to only go out the outside interface unless there is a specific rule allowing it go elsewhere?
(Of course Dynamic PAT will also be configured for traffic coming from the guest interface to the outside interface.)
I have problems in my Cisco network until I connected some Moxa devices.This Moxa are models EDS-316 and EDS-208
My principal trouble is the traffic UDP. Suddently the network don't permit the traffic UDP in VLAN where are connected Moxa devices.
During an hour the Moxa can send TCP traffic, but can't send UDP. If a Moxa device is unplugged from network, all devices connected to him can work offile from principal network, but if I plugg again the Moxa is like disable.
After one hour (more or less) the system restart all functions and work fine.I catch the logs from TXerrorsInPorts and all the ports where is connected a Moxa have errors all time.
I don't know which is the problem, but I think that problem is in negotiation from Moxa to Cisco.This is the configuration from a port where is connected a Moxa: [code]
I am trying to hook up a SF300 switch to a cable modem and then plug some phones into the switch that are configured with static IPs. I am able to access the switch without an issue, but need it to pass traffic from the phones to the network and it is not doing so. We cannot do trunking because we are not using BSoD modems yet (next phase). For now, we just need the switches to pass everything from the phones to the network as is. Any ideas?
View 4 Replies View Related I have a ASA 5505, which has two IPSec RA tunnels build, for each one the user is able to authenticate and get an IP address is the designated IP pool, but they are not able to ping the Firewall, or RDP to any internal servers. Here is a copy of the running config:
: Saved
:
ASA Version 7.2(2)
!
hostname ciscoasa(code)
We have cisoc 2821 at one of branch and created five sub inetrfaces for different vlans.Output of Show interface shows very frequent increase in the input error count.I have changed the physical cable and switch port on the other side.But still error rate is increasing.When the traffic is less error rate is low but with high traffic it is increasing drastically.My router process is very less(4%) only.What could be possible reason. [code]
View 8 Replies View RelatedWe are looking to implement traffic shaping/policing primarily for P2P traffic. As natively the ASA5550 is only capable of p2p inspection if the traffic is tunneled via port 80 is the AIP-SSM the way forward? We have 2 5550s in active/active failover config. As a side note we are also looking to implement an IDS/IPS system so could this module cover all?Is this module going to provide the desired outcome or is there another module/device out there better suited for this? I would prefer to use the ASA5550s as opposed to implementing another product if only that we can make use of the investment we already made on these devices.
View 1 Replies View Relatedwondering if redirection or conversion port 8080 into port 80 is possible? if so how and what cisco equipment can do that?
View 11 Replies View RelatedAs of late, I've been pretty unsatisfied with my WRT54GV6 with DD-WRT. It just can't handle the amount of traffic that my network generates now. I was considering building an Untangle or pfsense box and wanted to know if drivers or performance were an issue.
Foxconn R20-D2 Intel Atom D510 Intel NM10 Intel GMA 3150 Barebone
PQI POWER Series 2GB 240-Pin DDR2 SDRAM DDR2 800 (PC2 6400) Desktop Memory Model MAD42GUOE
Intel Pro/1000 MT Dual Port Server Adapter Gigabit NIC
I cannot get my server to send outgoing traffic through my network. I.e. If i try to connect to any of my services i get a very weak connection. Now, i can still CONNECT, i just don't get any data flow. I cant even PING the server internally, it just times out. Now, regardless of whether i use my internal IP/external domain, i get the same issue. I logged onto my computer and tried a speed test the download was normal (around ~20mbit) but the upload times out.
Here is the fun part, if i connect to the server using a switch, everything works fine! Is it my router or some stupid configuration issue? Router is a WRV54G (I hate this thing). Server is running windows 2008 and has a virtual machine.
we have three separated network segments going to one Cisco 3750 switch all is L2 .. from this switch is 100 mbit uplink.we need to apply some Qos mechanism not to saturate line by traffic from one network.. Configuration from various reason CANNOT be done on switch where 100Mbit line is terminated.. so all must be done on SW1,2,3..Correct me if iam wrond but as switches doesnt see traffic from other network iam affraid only think we can do is limit bandwidth on links going into SW1,2,3 to 33 Mbit.I found commad srr-queue bandwidth limit.But links going to SWs are 1Gbit so if i force bandwidth to 10% (minimum what command allows) its 100 Mbit..If I force speed on those links to 100Mbit and than apply srr-queue bandwidth limit to 30% doest it work.??. Will srr-queue bandwidth limit speed to 30Mbit?? Or srr-queue bandwidth limit is calculated from maxim speed of interface?
View 1 Replies View Relatedwe have a Cisco 2901 as a router on a stick for several vlans. Everything on the segment routes fine and accesses the internet just as they should. The 2901 connects to an ASA5505 on port 0/1. Any host connected to the ASA5505 can access the internet, but can not ping into any of the vlans off of the 2901. The strange thing is on either segement of the network I can ping all of the gateways. What is even more strange is when I run wireshark from behind the firewall going into the 2901 I can not see the packet on another wireshark instance behind the 2901. However if I start a ping for a host host behind the asa I can see the packet in wireshark on the host, which I am trying to ping, hit the gateway.
View 15 Replies View Relatedwe have ASA 5510 Configured. this is regarding site-to-site VPN.
View 1 Replies View RelatedI am testing limit bandwith using my ASA 8.2, i am trying to limit internet access for certains users , i order to save Bandwith for the important things but i can´t get any limitation
My configuration is the following, the acces list is just for my pc in order to test, and the service policy is applied to outside interface (called internet in my case) for incoming traffic
access-list Internet_mpc_1 extended permit ip host 172.16.127.70 any class-map Internet-class-TEST match access-list Internet_mpc_1 policy-map Internet-policy-web class Internet-class-TEST police output 1024000 1500
service-policy Internet-policy-web interface Internet
With show service policy i can´t see any activity on the policy , but if i do a similar configuration for inside interface outgoing traffic i can see packets allowed and dropped
I have an ASA 5520 with the below config
Gi0/0: outside (Internet)
Gi0/1: inside (Internal users)
Gi0/2: DMZ (web servers, ftp, Mail etc..)
I have a SMTP relay deployed on the DMZ for mailing. I have also a mail servers installed in the internal lan,
I want to allow trafic from dmz to reach internal lan, and i want normally also allow stmp relay from dmz to reach Internet.
How can i block trafic from DMZ to reach Internal Lan (instead of smtp) if the to allow trafic from dmz to internet i must put ANY in the policy?
For allowing trafic from DMZ to reach Internet, the policy must be DMZ -----> ANY ----->Services., this policy means DMZ can implicity reach Internal Lan?
We have a Cisco 2811 running ITP IOS. On that router we run the SMPP service. A client on the network connects to this service, and we need to capture the traffic for debug.
I've tried traffic-export, but I cannot see any outbound traffic.I'm guessing that this is due to the fact that the outbound SMPP traffic is not transit traffic as it is generated by the router itself.
Is there any way to capture the outbound traffic?
My network topology consists of 3 directly connected routers where the central router contains sensitive data and i need to block traffic from ENTERING the LAN adjoined to that router. My issue is creating an access list to DENY traffic from entering the network connected to Fa0/1 but ALLOW traffic to exit from that network. I am using one class C network which is subnetted 7 times to provide me with the required LAN's.
View 2 Replies View Related