Tuesday, October 2, 2012

network monitoring

Detect Local Services
# netstat -tulnp

Detect Remote Services
# nmap -A -sT  <server>

Capturing and analyzing network traffic
# tcpdump -D
to show all available capture interface

Example to capture port 22 from interface eth0
# tcpdump  -nn  -l  -s  2000  -w  packets  -i  eth0  'port 22'

Analyzing network packet with wireshark
install the wireshark-gnome
copy out the output of tcpdumb
# wireshark <tcpdumb file>

No comments:

Post a Comment