Irtsgbr

Is this app Icon Browser Safe/Legit?

What did it mean to "align" a radio?

How can I autofill dates in Excel excluding Sunday?

Lightning Grid - Columns and Rows?

Right tool to dig six foot holes?

What to do when moving next to a bird sanctuary with a loosely-domesticated cat?

Button changing it's text & action. Good or terrible?

How to manage monthly salary

Is there any way to tell whether the shot is going to hit you or not?

What is the meaning of Triage in Cybersec world?

Did 3000BC Egyptians use meteoric iron weapons?

How come people say “Would of”?

What does ひと匙 mean in this manga and has it been used colloquially?

Is a "Democratic" Oligarchy-Style System Possible?

One word riddle: Vowel in the middle

Why not take a picture of a closer black hole?

Protecting Dualbooting Windows from dangerous code (like rm -rf)

What could be the right powersource for 15 seconds lifespan disposable giant chainsaw?

What are the motivations for publishing new editions of an existing textbook, beyond new discoveries in a field?

Apparent duplicates between Haynes service instructions and MOT

What is the closest word meaning "respect for time / mindful"

Is three citations per paragraph excessive for undergraduate research paper?

Is an up-to-date browser secure on an out-of-date OS?

What is the most effective way of iterating a std::vector and why?

Mapping network connections between servers

.everyoneloves__top-leaderboard:empty,.everyoneloves__mid-leaderboard:empty,.everyoneloves__bot-mid-leaderboard:empty height:90px;width:728px;box-sizing:border-box;

1

Sometimes I'd like an easy way to produce lists over everything a server accepts or connects to. Not what it can connect to/accept connections from (firewall rules etc) but actual connections.

I can kind of solve this in a number of ways:

• running ss or netstat on a schedule and collect data (how often and how long to make sure nothing slips through? yuck)


• get firewall to log almost everything (not always an option)

Both these ideas should allow me to (with some postprocessing and additional data gathering to ) to generate lists of

• which processes


• send and/or receive data (ok, maybe technically just connects in some cases)


• on what ports


• to or from which addresses

But I still have a feeling I might be missing a simpler solution. Does something like inotify / Filesystemwatcher exist for networks? Or something that can be used to similar effect? I'm more or less comfortable in both Powershell/Bash and a few mainstream programming languages so it is OK even if it requires some assembly.

This question here is kind of similar but the tools recommended seems to be geared more towards what can be connected to, not where data actually flows: Automated Network Mapping

networking monitoring autodiscovery

share|improve this question

edited 12 hours ago

Erik I

asked 13 hours ago

Erik IErik I

3181618

• 
  
  
  

  
  

  
  
  
  
  
  

  
  
  ExtraHop and NetScout are a few products that do what you are looking for. (The demos I've seen are impressive, but I've never used them beyond a proof-of-concept phase.)
  
  – Doug Deden
  8 hours ago
  

  
  
  
  

add a comment | 

1

Sometimes I'd like an easy way to produce lists over everything a server accepts or connects to. Not what it can connect to/accept connections from (firewall rules etc) but actual connections.

I can kind of solve this in a number of ways:

• running ss or netstat on a schedule and collect data (how often and how long to make sure nothing slips through? yuck)


• get firewall to log almost everything (not always an option)

Both these ideas should allow me to (with some postprocessing and additional data gathering to ) to generate lists of

• which processes


• send and/or receive data (ok, maybe technically just connects in some cases)


• on what ports


• to or from which addresses

But I still have a feeling I might be missing a simpler solution. Does something like inotify / Filesystemwatcher exist for networks? Or something that can be used to similar effect? I'm more or less comfortable in both Powershell/Bash and a few mainstream programming languages so it is OK even if it requires some assembly.

This question here is kind of similar but the tools recommended seems to be geared more towards what can be connected to, not where data actually flows: Automated Network Mapping

networking monitoring autodiscovery

share|improve this question

edited 12 hours ago

Erik I

asked 13 hours ago

Erik IErik I

3181618

• 
  
  
  

  
  

  
  
  
  
  
  

  
  
  ExtraHop and NetScout are a few products that do what you are looking for. (The demos I've seen are impressive, but I've never used them beyond a proof-of-concept phase.)
  
  – Doug Deden
  8 hours ago
  

  
  
  
  

add a comment | 

Sometimes I'd like an easy way to produce lists over everything a server accepts or connects to. Not what it can connect to/accept connections from (firewall rules etc) but actual connections.

I can kind of solve this in a number of ways:

• running ss or netstat on a schedule and collect data (how often and how long to make sure nothing slips through? yuck)


• get firewall to log almost everything (not always an option)

Both these ideas should allow me to (with some postprocessing and additional data gathering to ) to generate lists of

• which processes


• send and/or receive data (ok, maybe technically just connects in some cases)


• on what ports


• to or from which addresses

But I still have a feeling I might be missing a simpler solution. Does something like inotify / Filesystemwatcher exist for networks? Or something that can be used to similar effect? I'm more or less comfortable in both Powershell/Bash and a few mainstream programming languages so it is OK even if it requires some assembly.

This question here is kind of similar but the tools recommended seems to be geared more towards what can be connected to, not where data actually flows: Automated Network Mapping

networking monitoring autodiscovery

share|improve this question

edited 12 hours ago

Erik I

asked 13 hours ago

Erik IErik I

3181618

share|improve this question

edited 12 hours ago

Erik I

asked 13 hours ago

Erik IErik I

3181618

share|improve this question

edited 12 hours ago

Erik I

asked 13 hours ago

Erik IErik I

3181618

asked 13 hours ago

Erik IErik I

3181618

asked 13 hours ago

Erik IErik I

3181618