2

I am using my ubuntu system as an internet gateway.

I am searching for a Network monitoring tool (Web based or command line based) with which I can see which computers from my network are communicating which domains and IP address on the internet

Also, if I can find out the top domains or IP to/from which data is sent or received from.

The thing is some system from my network is throwing bruteforce attacks and spamming outwards. I want to know exactly which system is sending out data and is causing problems to me.

All help, advices would be appreciated ! Thanks

1

I would begin with some basic, well documented, time tested tools.

https://danielmiessler.com/study/tcpdump/

1

A quick method of analyzing traffic would be to use a packet analysis platform such as tcpdump or even Wireshark/tshark.

However, if you're looking to specifically identify or prevent malicious traffic, you probably want to look into a fully-fledged Intrusion Detection System (IDS). snort is one of the most robust today, and can even run on the Ubuntu system if wanted (but I wouldn't recommend).

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.