I am wondering if I can log all activity on my network. Right now I can log activity with MAC addresses, but if I add a device I have to keep adding MAC address. I also have to have several policies because I can only put about 7 MAC address in per policy.
I noticed the option to add 'other machines' and I am not sure how this works. I have tried it and can't get it to work.
I am using a Dlink 655 router. On the inside are DHCP systems. On the outside is my server. I cannot seem to get the inside machines to recognize my file shares outside the dlink. The outside server is a MAC mini. Any machine outside the server can see the file shares (regardless if they are a Mac or a Windows PC - So I know that SMB is set-up properly).How can I get the inside servers to see the file shares on the outside machine?
View 1 Replies View RelatedI recently switched from a DSL ISP (Earthlink, Zyxel modem configured as a bridge, pppoE connect) to a cable ISP (Comcast, Arris cable modem, dhcp connect). Basically PC --> DIR615-->Cable modem-->Internets. With the old DSL the Internet activity LED (green, looks triangular) on the DIR615 blinked only when internet activity occurred. With the new Comcast connection it blinks non-stop about 5 times a second! Even if the PC is turned off it blinks. It stops blinking if I disconnect the ethernet cable between router and modem. The connection itself is fine, but if the DIR615 is doing something it should not be doing it might slow the connection down a bit, (or burn something out prematurely?)FYI, the Arris cable modem does not seem to be a router. It takes a cable connection from outside and provides a single ethernet cable and 2 (voice) telephone cables to the house.
View 1 Replies View RelatedRegion : Canada
Model : TL-WR1042ND
Hardware Version : V1
Firmware Version : 3.14.4
Recently in the morning the router will have lost ability to connect to internet <internet light is on> and I cannot access the router page <sys light solid> from either wired or wireless connections. Why is this and will it be solved if I upgrade firmware?
I'm encountering what I think is an issue on logging system on FW ASA 5520 - Asa Version 8.4(2), ASDM version 6.4(5). When I disabled the logging inside a rule from ASDM, or from console with the "log disable" option inside ACL, If I check in ASDM logging real time window I continue to see all the entry related to disabled rules. This is a correct behaviour about ASA logging ? How I can "hide" the entry related to disabled rules (this is what I need for troubleshooting purposes) ?
View 1 Replies View Relatedhow to get web logging working? I set up an Access Control policy for web logging only for one machine on my network. I also turned Syslog on and have Kiwi syslogd running on my desktop. However, it's not logging web traffic. how to get web logging working correctly?
View 4 Replies View RelatedThere is a page in the DIR-825 that logs your computers IP and the other IPs it is connecting to. I was wondering if there was a way to disable that function on select devices? My handhelds and legitimate computers that should be on the internet are filling it with spam and it is hard to check for unauthorized users on the network. If that is not possible, then would I be able to completely disable the feature?
View 1 Replies View RelatedIs it possible to get both allowed and blocked web access logging? I'm using the 2.06NA firmware and no matter how I configure the router, I just can't get it to work, so either I'm missing something or the firmware has a defect, I hope its me, but I fear its a defect.
View 6 Replies View RelatedWhy the IOS on 4500 doesn't support globally, although am running the IOS 12.2,need for logging event link-status global.
View 3 Replies View RelatedI was examining my router's logs the other day and I noticed a recurring entry stating that my PC's IP address was sending packets to the IP 172.16.30.115 on port 80, and that the router was dropping them.Except for the fact that my home LAN uses the 192.168.1.0/24 network EXCLUSIVELY. That is all it has ever used since this router was set up, and the only other networks we have EVER used are 192.168.0.0/24 and 192.168.2.0/24. So why, I wondered, is my PC repeatedly sending (presumably) HTTP traffic to a private IP that is not and never has been on my network?I wasn't worried about what these connections might be doing, since I figured they couldn't do anything, but I was kind of concerned about what was generating this traffic in the first place. So I downloaded Wireshark and ran a capture for 30 minutes. Upon completion, I filtered results to show only packets that contained the IP 172.16.30.115, as either the source or destination IP.Based on the router logs, I expected to see three packets with my PC's source IP address and a random source port sent to 172.16.30.115, port 80 every 10 minutes.And I did see that. These are TCP packets, and they appear to be completely empty. The only thing I noticed about them is that the SYN flag is set. I don't know what the significance of that is, if any, but that's what I noticed.
What I DIDN'T expect to see were the packets that had a source IP of 172.16.30.115. These packets (also TCP) had the ACK and RST flags set, and they contained the text "Go away, we're not home." So not only are there packets being sent to an IP that cannot possibly exist within my network, but there are also packets coming FROM the impossible IP telling me to go away.All of that is scary enough on its own. But then I hopped on Google and did a search for the phrase "go away, we're not home," and almost every result was related to the decline of the Storm worm. After reading about Storm, I was more confused, not less. In its heyday, Storm used UDP traffic to communicate between peers, and my mystery traffic was TCP. Storm usually did not use well-known port numbers, such as 80, which I read was part of what made it so resilient. Not to mention that the most recent posts I could find regarding the Storm worm were dated 2010 and were about the possibility of a second Storm, and I didn't get this PC until May 2011. Plus, even if we ignore all of this and operate under the assumption that I have the Storm worm on my PC, that still doesn't explain the fact that the traffic from my computer is heading to a private IP that is NOT, I repeat, NOT being used on my network, my router says it's dropping this traffic, but my PC is still somehow receiving a response from an IP address that 1) isn't on the network and 2) can't be having any packets forwarded to it, since the router says it's dropping the traffic.So, operating under the worst-case scenario assumption, I used two different virus scanners (not simultaneously, of course) to do the deepest scans they are capable of doing. They both turned up completely clean. In fact, I've had AVG Free installed on my computer since I got it, and even if you look at my virus history you only see a few tracking cookies, a corrupted EXE from the Skype setup folder, and a Trojan dropper that I never even ran because I thought the file properties seemed fishy so I scanned it and promptly deleted it. So I now have to go back to operating under the assumption that I do NOT have the Storm worm, and I am back to the drawing board.
REmote desktop connection times out when there is no activity, I mean I open rdp to work computer from home ,If I am away from the computer I am not using keyboard , after few minutes I get a blank screen and if it is very longthe connection times out and I have to relogin to my computer, I need suggestion on how to retain the connection so that no blank screen appears and I alos dont loose connection .
View 1 Replies View RelatedI heard my brothers' conversation in our house. One was asking another, if he is downloading things. The other one replied, saying no, he didn't. And then the one that was asking said, he knew he was lying. He can detect and monitor that person's IP address to know enough if the other person is downloading or not.
View 6 Replies View RelatedSometimes when I actively use the LAN (copy a file or stream media), my PC loses connection to both the internet and LAN. It doesn't always happen though. I can always fix it by opening network connections and disabling Local Area Connection and then re-enabling it. However, if I don't do this, the connection stays off indefinitely. The PC that loses connection is on Windows 7 64-bit with Asus P5K integrated ethernet controller with latest drivers. Modem/router is Linksys WAG320N.
View 10 Replies View RelatedDuring the last month or so my internet connection keeps stalling and will not work until I repair the connection, however I am still connected to the network, I just can't send or receive packets. In particular when I am downloading things, it will stop after 2MB is downloaded or 300MB, it just random. After sending/receiving 7,000 packets or 700,00. This only happens to my computer with the wifi adapter. Prior to this I didn't have any issues for over two years. My phone and laptop still connect via wifi to the internet. And the xbox and blu ray player are connected via ethernet and have not had any problems. The log for my router states "deauthenticate reason 3", which I have found to mean "The access point went offline, deauthenticating the client". So, I figured that the issue could be the wifi adapter which I installed on the laptop and that too never had an issue. I used inSSIDer 2.0 to see the close by networks and changed channels to get away from the strongest ones. I tried switching to wireless n only instead of g and n, the problem still persists.
Then I figured the issue must be my computer and no malware, spyware, adware nor any virus was found. The same thing happened while in safe mode. I also tried the winsock fix to no avail, reinstalled the wifi adapter and made sure all firmware for the router and adapter were up to date as well as XP. I also tried with my firewall shutdown but I still loose the connection. So I then reluctantly did a clean install and even with the bare essentials it still stopped working. I also bought a 15ft USB extension to get a better signal but still, even though I have a good or excellent signal I still have problems. My latest thought was this was the only machine running firefox 4 so I went back to 3 and that didn't either. I checked my usage with my ISP and I am no where near the 250GB a month.
I keep getting disconnected and blocked from using even LAN on my computer. This happens whenever I visit certain websites. For instance, I registered on a website that has me "kept signed in", and whenever I click to view that website, it partially loads and then for precisely 1 minute any network activity I try (like visiting my router configuration page, or clicking refresh or home to load google) will not go through. Only after that one minute is over with, I can resume browsing that website; however, if I leave it for too long, and then return, the same thing happens.
I've also noticed that if I sign out of that website and then visit it, that disconnect issue won't happen.But that isn't the case with other websites, as they require no accounts and are just pages with news and other stuff.I tried uninstalling and reinstalling my ethernet drivers, tried flushing dns, renewing ip, releasing and some other /cmd stuff that I found online.This also doesn't happen on any of the computers connected to my router (although, they are all using wireless - I am using cable to router).I'm on windows 7 x64, using a realtek ethernet card, Nod32 security suite (think it may be the settings on this thing? I set everything to super safe settings so I don't get any dumb viruses). Windows is updated (well, at least 3-4 months ago it was updated). I have no idea what is causing this, and why the precise 60 second interval until I regain access to the internet.I'm using Firefox, but this also happens on IE8 or 9 or whatever I have installed, so I don't think it's a browser issue.Things like facebook, youtube, pennyarcade and other junk work, but as soon as I go to google looking for, say, apartment rentals and open some pages, one of the links in the search results is bound to make my connection freeze.
My office uses a Windows domain network. Is it possible for them to track which IP/Port I'm using through some network software. Sometimes I do SSH access to my server. Can they get notified any how about this ? We use Windows XP SP2.
View 3 Replies View RelatedWe presently have a guest wireless solution in place using 4400/5508 WLC controllers authenticating guests via a NAC Guest server. This has functioned well for the last year or so, but now our security team has requested that we begin logging guest activity. I already have RADIUS accounting set up on the WLAN configuration pointing to the NGS,I have added the NGS to the syslog set up on the controller (I have tried various syslog levels) but I am not receiving any guest activity info in the reports on the NGS. Any way for getting this data?
View 2 Replies View Relatedwe recently purchased a sg300-52. i was told i would need to setup a port trunk to connect it our main catalyst. However, i was able to connect a patch cable on the two devices and ping endpoint devices on both switches. I also noticed that the activity lights are constantly blinking. I'm not sure why. Is there something i can do to slow the activity light? it blicks constantly even in times of very low activity by the endpoint.
View 2 Replies View RelatedIs there any way to hide my activity on the network? My network administrator monitors our network activity, specifically chat.
View 1 Replies View Relateddetect botnet acitivity from network point of view.
View 15 Replies View Relatediam opening a cyber cafe next week.i have one computer (main server) which is connected to 5 monitors by an device named Ncomputing device and software.i have one cpu which is connected to others monitors.my question is how to see other 5 computer" s activity by my host pc?
PC SPECS:
intel i3 2120
h61 mobo
windows 7
I recently received an email from my internet provider showing illegal movie downloads through my modem. I have a wireless router hooked up (with password security) for my roommates to use and would like to monitor their internet activities to know who is downloading these movies.
View 3 Replies View RelatedI wonder if there is a free programme that will let me look at network traffic/activity on my network, i'm having real issues with with access and the slow down of the network. Unfortunately my switches are not managed.
View 2 Replies View RelatedThis morning I lost wifi connectivity. I reset the router and powered off and on the modem along with the router but to no avail. The blue stripe no longer shows on the top corner of the machine.I am able to connect to the internet using the ethernet ports on the router. I also tried to get into programming using 192.168.2.1 but it is timing out.
View 1 Replies View RelatedI want to secure our WLAN via Web Authentication with our new Cisco 2504 WLC. But where do i find user activity logs?
View 2 Replies View RelatedI am using Bit meter (on Windows 7 64-bit) to measure up/down activity on the network adapter connected to the RV042 in load balancing mode. Is there a way I can, in real time, have a visual indication of up/down network activity on the WAN 1 and 2 port separately on the RV042?
View 1 Replies View RelatedI'm running a wpa2-secured guest ssid on a particular vlan that allows traffic to the web but restricts any access to internal network resources. It had been working fine for a couple of weeks, until the network started intermittenly dropping - at first I tried swapping channels and rebooting, but there has been no progress. I keep a running log at all times as long as the network is still active, but once it drops, the only message I'm getting is
'Line protocol on Interface Dot11Radio0, changed state to down'
My understanding would be that this is the same message logged when a user manually turns off the radio from a terminal window, is this correct? Or am I missing some basic troubleshooting steps?
In each case, the routers have functioned flawlessly for a period of 2 to 8 months, then suddenly begin to require daily to hourly reboots to keep the speed up, and often times fail to respond to any web activity whatsoever. Ping tests are intermittent, sometimes failing but other times succeeding while web sites remain unresponsiveFor three years I lived with two or more room mates at a time, each of us with our own computer (or 2) and all doing a lot of peer to peer downloading. I realize a router can overheat during heavy use like this, so buying new routers so regularly has seemed vaguely understandable. However it doesn't seem like that is the case in my most recent failure.I've lived alone for the past 3 months, and have owned the Belkin Play Max N600 HD since. I have NOT been P2P downloading or putting a heavy load on my router in any way (or so it seems). Yet as of about two weeks ago, it has suffered a major slowdown just like all of its predecessors. Yet my 30 mbps internet connection roars to life the moment I plug the modem directly into a computer.
My desktop remains on 24/7 but like I said before, I do not do constantdownloading/uploading. Both wired and wireless connections are effected equally, and I have always kept all my routers WPA encrypted.When websites become unresponsive on my Belkin today, it is usually after everything has been sitting idle for some time (overnight, or all day while I am at work). Speaking of work, today is a perfect exampleI remoted into my home desktop and was able to interact just fine, yet when I would launch a browser and try to load any website at all, I get absolutely nothing. I had to transfer a text document through DropBox (which also still worked) because I couldn't get Google Docs (or gmail) to load on the remote computer
I am triing to migrate my old ACS to the new one. I am using ACS 5.3 on appliance CSACS-1121. Sometime, i loose the connection to the appliance and i could not connect to the appliance with SSH, i could not start the GUI and the authentication is switched to the secondary instance. As soon as I have traffic, the connection is restored.
View 3 Replies View RelatedI have a Cisco / Linksys SRW 2016 switch, all was working fine. Powered off and powered back on a day later.Switch powered up and the system light lit.But non of the ports what had cables connected were active....If you connect a network cable to the switch and then a laptop / pc .. The computer knows that there is a connection, but only gives a 169 address. Presumably because the switch cannot get to my dhcp ?I have tried connecting a serial cable to the switch top see if I can see any error, but when running Hyper Terminal I only get the white screen and can not see any POST etc.As far as I under stand it is a straight through cable, do I need a null modem cable to console onto the switch?
View 1 Replies View RelatedMy previous setup was a ProSafe GS108 switch, 10/100 Dlink router/switch used only as a switch, and a DI-655 router/switch. With this setup, activity when I wasn't using any of my computers was zero. There would be no blinking activity lights.
I dumped the ProSafe and 10/100 switch, and use the DI-655 only for my internet uplink and wireless, and now have everything else plugged into a Cisco GS200 switch. There is activity now every two seconds. I presume this prevents the Green energy saving features from kicking in as the ports are in use.
What's the difference that's leading to all this activity that presumably wasn't there before?
Running Windows XP Im a bit Dizzy as i can't seem to workout what's going wrong or what im doing wrong lol!!!8 Pc's on the network, all can view files etc.apart from one Pc Lets just call this "Bob1"It keeps asking for user name and password, now there's no user name or password on the giving pc, file and sharing is open and all the right ports giving. what i can't understand is that the reaming 7 pc's on the network has the same setup and files permissions, on the same subnet and can ping each other to my knowledge.So just to prove myself wrong i made a password for the pc that was asking for one on the network and this still did not work.so to cut the story short 7 pc's can search each other fine but on "Bob1" keeping asking for user name and password.
View 3 Replies View RelatedDoes ZoneAlarm's tvDebug log file record the websites I visited? And if so, how do I delete it?
View 3 Replies View Related