Anyone know of a way to run packet analysis against a virtual server without having to install wireshark on said server?The Virtual server in question is very small, however the physical box has a number of virtual servers on it, some of them very big that push gobs of data.Is there any known way to just check traffic against said small server? Or will I have to just bite the bullet and filter the traffic from everything else out?
View 3 RepliesIs there a tool which can analyse the incoming and outgoing traffic on a computer hooked to the internet via a router.I would want to know the name of the program or application generating the outgoing traffic or receiving the incoming traffic and if possible the source of incoming traffic.I can read my Dir-628 router's log but all you really see are IP addresses.
View 2 Replies View RelatedI'm an IT student and I've been assigned with homework simulating a network including an ISA server and some clients in Packet Tracer but I can't find anything which can be configured like an ISA (Internet Security and Acceleration) server(this is kind of Microsoft's technology as I know) in Packet Tracer, the generic Server from the devices box has only some basic services such as HTTP, DHCP, DNS, FTP, AAA, ... but none of anything related to ISA, all the servers in Packet Tracer have only 1 interface whereas the ISA server (as far as I know) should have at least two interfaces, and there is also no CLI supported for those servers so I think I can't simulate ISA server in Packet Tracer, can I?
View 4 Replies View Relateddocumentation on upgrading a WS-SVC-NAM-2-250S. I am looking to upgrade to 5-1-2 code if possible. I am only finding documentation for Prime version 3 NAM not version 2 that runs with 6500-SUP-720.
View 2 Replies View Relatedjust found that on [URL], it stated that Cisco ASR 1000's management tool is Cisco Prime Network Analysis Module, which is same name as software that can be install in SRE of Cisco ISR G2 router for network analysis via web browser.
My question here is this mean Cisco ASR 1000 has built-in support for Cisco Prime Network Analysis Module, which has similar function as the one on Cisco ISR G2 router's SRE?
I came across a situation where a client had an old PIX 525 running PIX 6.2. There was a Windows 2008 R2 server running Exchange 2010 that was having trouble delivering email to a handful of email servers. We then found out that we could telnet to these servers on port 25 but got no return traffic. We then went back the old email server that was running Windows 2003 Server and could telnet to port 25 on these email servers and got a response, saw the banner and could issue commands. The first thought was reverse DNS which we thoroughly checked and it was not. I turned off the smtp fixup protocol and that didn't fix it either. From workstations on the network running XP or Windows 7 or Linux you could telnet to these servers and you would get a response but just not with 2008 server. I spent hours on the phone with Cisco support and it was determined that the packets were returning and we could capture the packets on the outside interface but they were then dropped by the firewall. Using the 6.2 version of PIX we could not determine why the packets were being dropped. I suggested upgrading to the next major version to be able to troubleshoot the issue further. We then upgraded the PIX to version 7.0(8). After the upgrade we were able to telnet to the problem mail servers from Windows 2008 Server and there were no issues. Is there a know issue with Windows 2008 Server and PIX 6.2?
View 1 Replies View RelatedI want to record all activity on my WAG320N either by continuously downloading the log or by promiscuously mirroring all traffic to a nominated computer for analysis.
View 3 Replies View RelatedI have a 5520 in production at a customer's site between an outside 802.11 network and an inside server. The server can get to outside hosts OK, and the traffic is being NATed properly, and sockets initiated by the server on the inside can pass data both ways, but I need to allow outside hosts the ability to send 'announcement' UDP packets to the inside server. I thought this might be an outside-NAT-required issue to get the traffic routed, but I need the inside server to see the actual outside host source IP in the UDP packet, so I basically set the outside host up similar to the inside host, just without the NAT table on the firewall -- it's subnet is outside the destination (inside server) subnet, and its gateway is the outside interface of the ASA, the same way the inside server is able to get to hosts outside. The firewall should just route the packet with a destination of the inside subnet once it sees that it hits a 'permit' ACL.
I have the appropriate ACL's set up, and when I do 'show access-list' I see policy hits for the 'permit' statements where the outside host is generating the announcement and it's hitting the ACL. I even duplicated the ACL into list 101 and 102, and applied 101 for inbound traffic on the outside int, and applied 102 for outbound traffic on the inside int, and I'm seeing policy hits on both permit statements outside and inside, so it looks like the traffic is being passed on to the inside interface and permitted, but the server isn't seeing the packets.
I can ping the outside interface from the outside, but cannot ping the inside interface or any inside hosts from the outside, even though I have 'permit icmp any any' enabled on the ACL on both ints. When I remove the firewall and put the outside clients on the same subnet, the server sees the packets just fine.
I set up the same scenario in my lab with an ASA 5505, with the same results. Below is the running config from the 5505 in the lab. The production firewall is running a slightly older version of ASA, so I made the configuration as basic as possible on the 5505 to match the config in the field:
: Saved
:
ASA Version 8.3(1)
!
hostname ciscoasa
enable password Guh9Xxhb9mcC8lV1 encrypted
passwd 2KFQnbNIdI.2KYOU encrypted
names
!
interface Vlan2
description Outside WAN Interface
nameif outside
security-level 0
ip address 192.168.10.1 255.255.255.0
!
interface Vlan3
description Inside LAN Interface
nameif inside(code)
i have an issue for collect data on adapter 1, that don´t collect data but see that adapter 2 if collect data on module 4.
monitor session 1 source vlan 102 rx
monitor session 1 destination analysis-module 4 data-port 1
monitor session 2 source vlan 106 rx
monitor session 2 destination analysis-module 4 data-port 2
I reconfigured newly monitor and continues with that issue. Always ok by data-port 2.
- show version Cisco 6513
Cisco IOS Software, s72033_rp Software (s72033_rp-ADVENTERPRISEK9_WAN-M), Version 12.2(33)SXH7, RELEASE SOFTWARE (fc3)
. show version NAM
NAM application image version: 3.5(1b)
- sh module
Ports Card Type Model
----- -------------------------------------- ------------------
8 Network Analysis Module WS-SVC-NAM-2
Hw Fw Sw Status
------ ------------ ------------ -------
2.0 7.2(1) 3.5(1b) Ok
I installed WS-C4506-E 3 day ago. I discovered someting different module status Right at the end of the module ( WS-X4648-RJ45-E ) show red led. this is not port led i try to reset module several time. but it's same status. but this is operating now nomally I upload picture.. and this is module status and diagnostic result
Error code ------------------> 3 (DIAG_SKIPPED)
This Case is DOA(Dead of arrival ?
C4506#sh modChassis Type : WS-C4506-E
Power consumed by backplane : 0 Watts
Mod Ports Card Type Model Serial No.---+-----+--------------------------------------+------------------+-----------1 6 Sup 7L-E 10GE (SFP+), 1000BaseX (SFP) WS-X45-SUP7L-E ABCDE1234562 24 1000BaseX (SFP) WS-X4624-SFP-E ABCDE123456 6 48 10/100/1000BaseT (RJ45) WS-X4648-RJ45-E ABCDE123456
M MAC addresses Hw Fw Sw Status--+--------------------------------+---+------------+----------------+---------1 b0fa.ebe5.16c0 to b0fa.ebe5.16c5 1.1 15.0(1r)SG3 03.03.00.SG Ok 2 b0fa.ebc6.5b70 to b0fa.ebc6.5b87 1.2 Ok 6 10f3.1197.1490 to 10f3.1197.14bf 2.1 Ok
[code]....
I have an E1200 and am time out and packet loss issues. The internet connection is fine for 30 seconds to five minuets and then everything times out for 15-20 seconds. Although it’s only a minor incontinence to web browsing, it makes playing games and watching videos a nightmare. “Lost connection to server error.” and the like…
I upgraded to a new router, the e1200 I am currently using, from my Tenda 10/100 N. The problems where the same that I am experience currently and the reason I bought it in the firs place.When I directly connect to the cable modem, I have no issues and everything is fine.I have run a trace route and the second hop, (the router to the modem) is the choke point.I have cloned the MAC address.I have updated the firmware and hard reset
I have throttled my MTU to automatic, 1500, and 1472. None making any difference.I have disabled NAT and all that does is kill my internet connection.I have disabled all firewalls router and windows, no change.I replaced the physical wire from the router to the modem.I have disconnected all devices except one computer, and no difference.I ran a DNS trace and I have… non routable local internet address 192.168.1.1 DNS-cac-lb-01.rr.com and DNS-cac-lb-02.rr.com.I am using windows 7 and my ISP is time Warner so-cal.
I have an Cisco 6500 CS and there is a Cisco Unified Communication Manger Server connected directly to the Core Switch.I tried to change duplex and speed ( fix and auto ) for both sides, but the same problem.
View 9 Replies View Relatedi am implementing tcp as per rfc 793, i have one doubt, while sending first packet, if that packet lost means, tcp will wait for RTO and retransmit the first packet, and after got the ack for first packet, then only it will send second packet or without getting the ack for the first packet it will send second packet.
View 7 Replies View RelatedIn application udp port listening with 3330 i am sending udp request from port 0.0.0.0:3330 to 0.0.0.0:3330 that is same port in the same machine, application works fine with udp sending and receiving also fine, for clarification. s there any conflicts in the communication ?
View 5 Replies View RelatedI am trying to collect and track packets from other computers on my network and have them sent to my computer so i can sniff through them. I have been tacked with trying to reduce the amount packet broadcasts going through the network. I have been playing with Wireshark for a little bit only analyzing my packets but now I want to try collecting a couple of computers on my network. I know there is a little service that I can run with WinPcap but I am pretty sure there is a way to do it through the settings on my switches but i'm not sure what setting I need to use. I have 4 switches 2x Netgear GS724TS 2x Netgear GS724TR. I'm not sure what feature needs to be used to do what I want. All the switches can do SNMP and LLDP and I think it is one of these I need to use but not sure switch one to use.
View 1 Replies View RelatedI was calculating packet amount of MPEG I use byte rate to divide by 188 byte but now i want to calculate H.264 encode video what is the packet length of h.264? is it same 188byte?
View 1 Replies View Relatedwhen performing packet capture in a FWSM
[code]...
If i want to send a packet from one host to another host through a router, how will the packet be sent? I mean what are the stages that a packet can reach to the destination.
View 6 Replies View RelatedIXIA----DUT-----IXIA
| | |
|_______ |________|
DUT has redudant connections to IXIA. Im pumping traffic from IXIA and traffic takes PATH A .. When I shut PATH A, i expect traffic to shift to PATH B within 100ms (example). How do I test this ?
My ping is 35ms my DLS at 45.6 Mbps and my Upload is 4.51 Mbps. My Problem is that i am losing about 60 to 90 percent of the packets on a pingtest.net.
View 1 Replies View RelatedFor about the past 2 or 3 months, I have been experiencing outbound packet loss at about the same time every evening. That timeframe is about 7 PM - 10 PM. This is most noticeable on Teamspeak 3 because of the voice disruption that other users report to me.
View 1 Replies View Relatedi'm on the CCNA 4 accessing the WAN part for the Cisco Academy. I'm trying to do a packet tracer 8.6.1 and I'm stuck. I'm looking for the answer so I can figure out what I'm missing.
View 1 Replies View RelatedI have recently switch internet to Time Warner. Since the day I got it, i have experienced random packet losses of 100%. I have called time warner and they are going to send a tech out. But i would like to know more about this before he comes. I have replaced the modem with a brand new one. Surfboard SB5101N from the one i was leasing from them. They both do the same thing. I have made sure all my Drivers are up to date. I have replaced the coax cable and Ethernet cable and ran my Anti Virus and Spyware program. It does it more during online game, I have reinstalled the game and was having no problems with the ATT Dsl i had before this.
View 14 Replies View RelatedMy workplace has a UC-540 attached to a cable modem, attached to the world wide web.
When we make VOIP outbound calls through the standard ISP, there is no auditory packet loss sympton; however, when we make calls to out sister branch through our VPN, we experience auditory packet loss symptoms.
I would think the VPN should only be affecting the encapsulation of the data. To my understanding the VPN packets and non-vpn packets all hit the router at the same time, and transport over the web in the same manner. Why would there be packet loss over only the VPN??
--Regarding QoS, if a standard layer 3 device receives a VOIP packet encapsulated in a VPN, do the QoS bits in the VOIP packet get acknowledged, or are they hidden by the VPN encapsulation?
We have a web server running Joomla.There is a plugin to the website which downloads an iCal file from the internet via a URL. The site gives an error when retrieving this file. I can pull the file down manually via a browser, or doing a wget from the command line. However, the plugin fails. [code]I'm sure there's a packet being dropped in here somewhere, but from which side? Why on earth this would work fine through a browser or wget, but not via the PHP code which executes this GET?
View 3 Replies View RelatedHow can I pair a html file to a domain name in packet tracer?
View 2 Replies View RelatedI'm having an issue with packet loss during the same time every day at 12:20PM. I checked scheduled tasks, ran wireshark, made a static ARP entry, and ran ping tests. The ping tests show packet loss only when pinging 1 DB server to 1 App server. When the packet loss happens everyone on the network connected to the DB gets kicked out of the DB. They are eventually able to reconnect but its annoying that everyday at 12:20pm they get kicked out. Ping tests from the DB to the Firewall stay constant. But when I ping from the App server to the DB it loses connection at 12:20pm and when i'm remoted into the DB server i get kicked out as well. It's like at 12:20pm the DB server stops incoming connections for some reason.
View 7 Replies View Relatedmy local area connection is sending 0 packet and receiving unwanted packet
View 1 Replies View Relatedhaving some issues. My basic VOIP network I can get to work no problem uner Vlan 1. But when I try tomake multiple basic networks to connect and put them in to diffrent Vlans such as Vlan 2, 3, 4 and conect them the phones now say configuering IP.
View 1 Replies View RelatedIsn't there a way to increase the TTL of an OSPF Hello packet or am I thinking of a different protocol? Or is it only with virtual links? I can't seem to find it in my ROUTE cert book or on the Intarwebz outside of setting TTL security, but I could have sworn I remembered configuring something like this in my ROUTE lab book that I unfortunately do not have at work.
View 8 Replies View RelatedI'm trying to set up a network comprised of three LANs connected by serial. As this is a small part of an assignment I've been instructed to subnet into /26 and to use /30 subnets for my serial connections.At the moment I can ping between devices on each of the LANs but I can't ping between routers at all. Embarrassingly I'm not sure why, I think it may be something I've missed on setting up the serial links as I have set routers up fine before using other connection types.
View 12 Replies View Relatedi'm doing B.E., final year.My project is IP TRACEBACK.so we hav to mark packets in router.Is it possibe to mark packet in cisco packet tracer?
View 1 Replies View Relatedhow to unlock the config tab in packet tracer?
View 1 Replies View Related