SomeoneDK
n00b
Joined: 22 Oct 2005
Posts: 40
Location: Aalborg, Denmark
|
 Posted: Sun Feb 10, 2008 2:54 pm Post subject: How to monitor network traffic per-application |
 |
|
Hi there.
I just recently got a new router with some more advanced log settings than my previous.
Going through the various logs for some good 'ol fun, I noticed the "TCP Reset" log being continously spammed with entries by my Gentoo server.
Here's a the first 10 entries from the log.
| Code: |
1 02/10/2008 14:36:00 Firewall session time out, sent TCP RST 192.168.1.100:35803 86.101.50.143:44454 TCP RST
2 02/10/2008 14:36:00 Firewall session time out, sent TCP RST 86.101.50.143:44454 192.168.1.100:35803 TCP RST
3 02/10/2008 14:36:00 Firewall session time out, sent TCP RST 192.168.1.100:36484 86.101.50.143:44454 TCP RST
4 02/10/2008 14:36:00 Firewall session time out, sent TCP RST 86.101.50.143:44454 192.168.1.100:36484 TCP RST
5 02/10/2008 14:36:00 Firewall session time out, sent TCP RST 86.101.50.143:44454 192.168.1.100:52542 TCP RST
6 02/10/2008 14:36:00 Firewall session time out, sent TCP RST 192.168.1.100:52542 86.101.50.143:44454 TCP RST
7 02/10/2008 14:36:00 Firewall session time out, sent TCP RST 97.100.86.112:35593 192.168.1.100:39021 TCP RST
8 02/10/2008 14:36:00 Firewall session time out, sent TCP RST 192.168.1.100:39021 97.100.86.112:35593 TCP RST
9 02/10/2008 14:36:00 Firewall session time out, sent TCP RST 80.109.194.51:6881 192.168.1.100:56364 TCP RST
10 02/10/2008 14:36:00 Firewall session time out, sent TCP RST 192.168.1.100:56364 80.109.194.51:6881 TCP RST
|
I didn't recognize the port numbers so as an attempt to find out what was causing this I killed the applications I thought could cause this such as, tightvnc, ventrilo etc.
I started up iptraf and could clearly see, that even though I had shut down those applications the TCP requests was still going on, which leads me to my question: Is there a way to monitor the network traffic on a per-application basis to pinpoint the exact application(s) which is causing this.
Thank you for your time.
Christian Rasmussen |
|
Networking & Security
