Network Monitoring Software

[outonalimb]

For the past two weeks, one of our UNIX servers has been crashing every two days. It appears to be a network problem as the STREAMS log indicates network overload.

We wonder if we have a virus on our network which is bomarding the server with packets. However, this is just a guess. We need some software to monitor and isolate the problem but we don't know what to get.

We've tried WhatsUp Gold but that only monitors network device availability. Can anyone suggest something? Do we need SNMP on all our clients?

 

[pansophic]

snoop, tcpdump or ethereal would be where I started. Have the machine logging the packets that it is seeing, or put a linux box on the same hub (or switch with port spanning).

I'd steer clear of SNMP unless you are familiar with the vulnerabilites that it introduces and how to mitigate them.


pansophic