Tracking network activity

d3viant · 11-15-2005, 04:57 PM

Hi

I am having some trouble with my network behaving strangely in Suse 10, and I can't seem to find anything obvious that is wrong with it.

Is there any sort of logfile of inbound/outbound connections with IP addresses etc in Suse 10, or is there a way to trace network activity and output it to a textfile or something?

I think that this would be the best way for me to find out what is going on with communication between the pc and the router

Thanks

d3viant

fouldsy · 11-17-2005, 02:45 AM

Something like iptraf is a very low-level way of tracking data but gives tons of data, up to something like Ethereal. What is it you are experiencing and so wanting to monitor?

d3viant · 11-17-2005, 05:13 AM

Basically, I get an ip address from my router, but then I cannot ping or otherwise access any other websites, other than the router. It isnt a firewall setting as I have already checked this and it is off completely. I just wanted to have a look at the network logs to see if I am getting any external communication at all.

fouldsy · 11-17-2005, 05:24 AM

Do you have your DNS settings correctly configured - what gets returned when you try pinging an external site or use nslookup on a domain name? It should explain what's happening. DSN servers can be specified within /etc/resolv.conf if none are currently set. Also, check if a default route is correctly assigned by simply typing "router" to display the routing table.

d3viant · 11-17-2005, 09:16 AM

From pinging a web page, I get the IP of that site returned, but no actual response from the ping packets. Below is an example from pinging google:

:~> ping google.com
PING google.com (64.233.187.99) 56(84) bytes of data.

It stays there until I press Ctrl-C, whereupon I get this:

--- google.com ping statistics ---
6 packets transmitted, 0 received, 100% packet loss, time 15028ms

What's funny is that it does get googles ip address - 64.233.187.99, but just won't get packets back from there