Text 44426, 62 rader
Skriven 2008-03-15 11:55:59 av Jeff Bowman (1:229/500)
  Kommentar till text 44409 av ED VANCE (1:123/140)
Ärende: Re: Flashing LEDs
=========================
EV> I often see the LEDs flashing on my Router and DSL Modem.
 
EV> I know Jeff G. told me it is things like updating the Time etc.,
EV> but I wonder if there is a program I can run that will let me know what
EV> is being transmitted and received.
 
Despite all the traffic your own machine likely sends out without your
realization (time, update attempts, etc), there is likely constant traffic
coming to and leaving your cable modem/router that your computer never sees.
People are constantly port scanning and attempting vulnerabilities on entire IP
blocks, looking for that one setup out of countless others that's been left
exploitable. All the packets and connections that get rejected are likely
causing a lot of that blinking.
 
 
EV> The other day I decided to look at the Routers Log.
 
EV> I didn't write any of the addresses down to PING them later, but thought
EV> about doing that.
 
A lot of the addresses you might see would be related to the above.  It
unfortunately makes such logs pretty useless most of the time for checking the
history of real traffic.
 
 
EV> I would like to have such a program like something that would use a
EV> "Ticker Tape" scroll line at the bottom of the desktop, or something
EV> like that.
 
EV> Is there such a critter?
*snip*
EV> Surely there is such a program as I want, because I remember hearing
EV> about Packet Sniffers, etc., used by the Bad Guys on the internet.
 
Ethereal/Wireshark (same thing as far as I know) is the best visual packet
sniffer for Windows, Linux, as well as possibly Mac (I won't say for sure but I
believe it's been ported there).  It might be a bit confusing to understand
what any of it means though if you don't know a fair amount about networking
and/or the various types of traffic, since it shows by packets rather than
connections.
 
There are probably other programs that can simply track actual connections only
if that's all you want, but I can't think of any at this particular moment.
Keep in mind that "connections" aren't the only sort of traffic that might be
in an out of your PC, though.  UDP traffic is "connectionless", as is ICMP. 
They're just individualized packets, where as TCP is an actual mutually
agreed-upon "tunnel".
 
Also keep in mind that any such program will only keep a record of any traffic
between your machine and the router.  Any of the garbage requests and attacks
between your router/modem and the outside world will never come to you to
record.  The only way to truly see all that stuff would be to capture stuff
coming straight off the modem before it hits the router.  Either by hooking the
modem straight to the PC, or setting your PC to be in what the router
designates the "DMZ" (basically dumping all incoming traffic to one PC in the
network).  But be very much warned that doing either of those (putting a PC
directly on the internet without a firewall) is never recommended.  Well, I
might trust Linux with all externally-connectable services disabled. But not so
much Windows, personally.

--- D'Bridge 2.99
 * Origin: FyBBS (1:229/500)