Page 1 of 1
Nagios Network Analyzer - Protocols
Posted: Mon Oct 21, 2013 9:31 pm
by argentra
Hi,
I am curious if it is possible to distinguish Protocols with Nagios Network Analyzer since for all the cases in my system it shows
"ANY" protocol which is a bit annoying?
I would also like to know how we can size the system properly. Is there any article about this? Can you supply me with the information
since many customers seems to be interested in this solution?
Thanks
Re: Nagios Network Analyzer - Protocols
Posted: Tue Oct 22, 2013 1:44 pm
by nscott
With queries it should be doable with a custom query. If you specify protocol desired.
So if you were making a custom query you would be like:
dst net 192.168.5.0/24 and TCP
Re: Nagios Network Analyzer - Protocols
Posted: Wed Oct 23, 2013 2:27 am
by argentra
It says that it is not a valid raw query when I try to run it.
Re: Nagios Network Analyzer - Protocols
Posted: Wed Oct 23, 2013 1:43 pm
by nscott
For some reason I had it in all caps just use
tcp
As your rawquery, that should work. Then you can add stuff from there.
Re: Nagios Network Analyzer - Protocols
Posted: Sun Oct 27, 2013 2:45 am
by argentra
Still not a valid raw query. Can you provide some detailed information on that, because I think that Nagios Network Analyzer do not provide that kind of information.
It is very crucial for me now since one of my customers needs assistance and I though that solution can help, but now it seems like I will have to use something else
to give me more details and to benefit from it.
dst net 10.10.1.0/21 and tcp
Error!
dst net 10.10.1.0/21 and tcp is not a valid rawquery.
Re: Nagios Network Analyzer - Protocols
Posted: Mon Oct 28, 2013 1:04 pm
by sreinhardt
What specifically are you looking to gather, or do not believe is available? A slight variant from nscott's post is "dst ip 127.0.0.1 and proto tcp" works just fine for me. Note that you do not need to specify an IP range and can also just do "proto tcp" if you would like. For the specific one you mentioned, try "dst net 10.10.1.0/21 and proto tcp"