Gentoo Forums
Gentoo Forums
Gentoo Forums
Quick Search: in
How to monitor a changed connection between CPE's
View unanswered posts
View posts from last 24 hours

 
Reply to topic    Gentoo Forums Forum Index Networking & Security
View previous topic :: View next topic  
Author Message
shuurai
n00b
n00b


Joined: 21 May 2013
Posts: 8

PostPosted: Mon Mar 17, 2014 4:40 pm    Post subject: How to monitor a changed connection between CPE's Reply with quote

Hello everyone,

I have a question to the following scenario:

We have a network with a lot of VPN connection from a dtedicated location to different locations.

The WAN connection might change to a backup ISDN connection.
I am not able to read the snmp trap from the CPE's.
This way I do not know when this happens.
Furthermore the Firewalls do not recognize this and the VPN tunnel is always open.

My question is how can I determine that the connection switch to the backup one?

I know that VOIP connections will not work with the backup line.
So my idea is to sniff the network of the dedicated location and look for VOIP protocolls.
If one of the IP's (locations) do not have any VOIP communications at all I could implicate that the connection to this locations switched to a backup line. (?)

I would appreciate any informations/help you could give me.


Best regards

shuurai
_________________
Still ermerging...


Last edited by shuurai on Tue Mar 25, 2014 6:48 pm; edited 1 time in total
Back to top
View user's profile Send private message
eccerr0r
Advocate
Advocate


Joined: 01 Jul 2004
Posts: 4003
Location: USA

PostPosted: Mon Mar 17, 2014 11:41 pm    Post subject: Reply with quote

If you can't poll the routing equipment, you could write a script that pulls in either traceroute information (if the network equipment forwards ICMPs) or checks a website that prints your IP address and note that address. Scripting a VOIP call I'm not sure about, but likely you will still need to have an external site of some sort to see if inbound connections work. Either way it sounds like you have to poll.
_________________
Intel Core i7 2700K@ 4.1GHz/HD3000 graphics/8GB DDR3/180GB SSD
What am I supposed to be advocating?
Back to top
View user's profile Send private message
shuurai
n00b
n00b


Joined: 21 May 2013
Posts: 8

PostPosted: Tue Mar 18, 2014 7:45 am    Post subject: Reply with quote

With thousands of connections a ping is definetly not an option.
_________________
Still ermerging...
Back to top
View user's profile Send private message
khayyam
Advocate
Advocate


Joined: 07 Jun 2012
Posts: 2244

PostPosted: Tue Mar 18, 2014 11:25 am    Post subject: Reply with quote

shuurai ...

perhaps you're looking for something like net-analyzer/nagios (website).

HTH & best ... khay
Back to top
View user's profile Send private message
shuurai
n00b
n00b


Joined: 21 May 2013
Posts: 8

PostPosted: Mon Mar 24, 2014 7:52 am    Post subject: Reply with quote

Actually I thought about something like that khayyam.

But tbh I do not know how to filter the packets for my scenario.

Every help is greatly appreciated
_________________
Still ermerging...
Back to top
View user's profile Send private message
shuurai
n00b
n00b


Joined: 21 May 2013
Posts: 8

PostPosted: Tue Mar 25, 2014 10:13 am    Post subject: Reply with quote

Does anyone know a packet analyzer (like wireshark) that is able to store the captured packets into a *.txt file or similiar?

I want to be able to store the date into a SQL database.
_________________
Still ermerging...
Back to top
View user's profile Send private message
shuurai
n00b
n00b


Joined: 21 May 2013
Posts: 8

PostPosted: Tue Mar 25, 2014 6:46 pm    Post subject: Reply with quote

Wireshark does have a terminal application!

F.e. under windows open the cmd and
    go to the programm path
    Code:
    cd /Programmes/Wireshark
    .
    use the command
    Code:
    tshark -D
    to show interfaces
    after that
    Code:
    tshark -i 1 -a duration:10 -w test



The last command would capture all the packets on interface 1 which are on wire for 10 seconds and save them in the "test.pcap" file.
After that you can open this file and export it to XML.

Well and from here on you can start playing with SQL :)

Actually this idea will not help me for my scenario at all LOL!

Anyway I hope this helps some1 :)


so far

shuuraj
_________________
Still ermerging...
Back to top
View user's profile Send private message
Display posts from previous:   
Reply to topic    Gentoo Forums Forum Index Networking & Security All times are GMT
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum