Otdfbt

Are my PIs rude or am I just being too sensitive?

3 doors, three guards, one stone

Disable hyphenation for an entire paragraph

I am not a queen, who am I?

If a contract sometimes uses the wrong name, is it still valid?

How discoverable are IPv6 addresses and AAAA names by potential attackers?

How to deal with a team lead who never gives me credit?

How can I fade player when goes inside or outside of the area?

Does surprise arrest existing movement?

Stars Make Stars

How to assign captions for two tables in LaTeX?

How to bypass password on Windows XP account?

IndentationError when pasting code in Python 3 interpreter mode

Is there a service that would inform me whenever a new direct route is scheduled from a given airport?

How to draw this diagram using TikZ package?

List *all* the tuples!

Sorting numerically

Right-skewed distribution with mean equals to mode?

What are 'alternative tunings' of a guitar and why would you use them? Doesn't it make it more difficult to play?

Why did the IBM 650 use bi-quinary?

Can a non-EU citizen traveling with me come with me through the EU passport line?

Is it possible to boil a liquid by just mixing many immiscible liquids together?

Is 1 ppb equal to 1 μg/kg?

Check which numbers satisfy the condition [A*B*C = A! + B! + C!]

Mapping network connections between servers

.everyoneloves__top-leaderboard:empty,.everyoneloves__mid-leaderboard:empty,.everyoneloves__bot-mid-leaderboard:empty height:90px;width:728px;box-sizing:border-box;

1

Sometimes I'd like an easy way to produce lists over everything a server accepts or connects to. Not what it can connect to/accept connections from (firewall rules etc) but actual connections.

I can kind of solve this in a number of ways:

• running ss or netstat on a schedule and collect data (how often and how long to make sure nothing slips through? yuck)


• get firewall to log almost everything (not always an option)

Both these ideas should allow me to (with some postprocessing and additional data gathering to ) to generate lists of

• which processes


• send and/or receive data (ok, maybe technically just connects in some cases)


• on what ports


• to or from which addresses

But I still have a feeling I might be missing a simpler solution. Does something like inotify / Filesystemwatcher exist for networks? Or something that can be used to similar effect? I'm more or less comfortable in both Powershell/Bash and a few mainstream programming languages so it is OK even if it requires some assembly.

This question here is kind of similar but the tools recommended seems to be geared more towards what can be connected to, not where data actually flows: Automated Network Mapping

networking monitoring autodiscovery

share|improve this question

edited Apr 10 at 14:08

Erik I

asked Apr 10 at 13:38

Erik IErik I

3181618

• 
  
  
  

  
  1
  

  
  
  
  
  
  

  
  
  ExtraHop and NetScout are a few products that do what you are looking for. (The demos I've seen are impressive, but I've never used them beyond a proof-of-concept phase.)
  
  – Doug Deden
  Apr 10 at 18:14
  

  
  
  
  


• 
  
  
  

  
  

  
  
  
  
  
  

  
  
  Thanks! Those tools seems way to heavyweight for me and I guess that holds true for the price as well. I'm working on a small proof-of-concept powershell script based on netstat. Will try to get back here once I have something that can do the basics. FWIW I found a useful starting point here: blogs.microsoft.co.il/scriptfanatic/2011/02/10/…
  
  – Erik I
  Apr 11 at 9:44
  
  

  
  
  
  

add a comment | 

1

Sometimes I'd like an easy way to produce lists over everything a server accepts or connects to. Not what it can connect to/accept connections from (firewall rules etc) but actual connections.

I can kind of solve this in a number of ways:

• running ss or netstat on a schedule and collect data (how often and how long to make sure nothing slips through? yuck)


• get firewall to log almost everything (not always an option)

Both these ideas should allow me to (with some postprocessing and additional data gathering to ) to generate lists of

• which processes


• send and/or receive data (ok, maybe technically just connects in some cases)


• on what ports


• to or from which addresses

But I still have a feeling I might be missing a simpler solution. Does something like inotify / Filesystemwatcher exist for networks? Or something that can be used to similar effect? I'm more or less comfortable in both Powershell/Bash and a few mainstream programming languages so it is OK even if it requires some assembly.

This question here is kind of similar but the tools recommended seems to be geared more towards what can be connected to, not where data actually flows: Automated Network Mapping

networking monitoring autodiscovery

share|improve this question

edited Apr 10 at 14:08

Erik I

asked Apr 10 at 13:38

Erik IErik I

3181618

• 
  
  
  

  
  1
  

  
  
  
  
  
  

  
  
  ExtraHop and NetScout are a few products that do what you are looking for. (The demos I've seen are impressive, but I've never used them beyond a proof-of-concept phase.)
  
  – Doug Deden
  Apr 10 at 18:14
  

  
  
  
  


• 
  
  
  

  
  

  
  
  
  
  
  

  
  
  Thanks! Those tools seems way to heavyweight for me and I guess that holds true for the price as well. I'm working on a small proof-of-concept powershell script based on netstat. Will try to get back here once I have something that can do the basics. FWIW I found a useful starting point here: blogs.microsoft.co.il/scriptfanatic/2011/02/10/…
  
  – Erik I
  Apr 11 at 9:44
  
  

  
  
  
  

add a comment | 

Sometimes I'd like an easy way to produce lists over everything a server accepts or connects to. Not what it can connect to/accept connections from (firewall rules etc) but actual connections.

I can kind of solve this in a number of ways:

• running ss or netstat on a schedule and collect data (how often and how long to make sure nothing slips through? yuck)


• get firewall to log almost everything (not always an option)

Both these ideas should allow me to (with some postprocessing and additional data gathering to ) to generate lists of

• which processes


• send and/or receive data (ok, maybe technically just connects in some cases)


• on what ports


• to or from which addresses

But I still have a feeling I might be missing a simpler solution. Does something like inotify / Filesystemwatcher exist for networks? Or something that can be used to similar effect? I'm more or less comfortable in both Powershell/Bash and a few mainstream programming languages so it is OK even if it requires some assembly.

This question here is kind of similar but the tools recommended seems to be geared more towards what can be connected to, not where data actually flows: Automated Network Mapping

networking monitoring autodiscovery

share|improve this question

edited Apr 10 at 14:08

Erik I

asked Apr 10 at 13:38

Erik IErik I

3181618

share|improve this question

edited Apr 10 at 14:08

Erik I

asked Apr 10 at 13:38

Erik IErik I

3181618

share|improve this question

edited Apr 10 at 14:08

Erik I

asked Apr 10 at 13:38

Erik IErik I

3181618

asked Apr 10 at 13:38

Erik IErik I

3181618

asked Apr 10 at 13:38

Erik IErik I

3181618