What programs exist to track traffic on the network?

S

Seter172012-09-11 17:14:00

Computer networks

Seter17, 2012-09-11 17:14:00

Hello!
The situation is this - I live in a hostel and, accordingly, access to the Internet here from one ip address. During the day, the Internet constantly drops to a wild minimum and almost turns off, there is an assumption that someone is starting to occupy the channel very hard and diligently. Is there a way to programmatically detect the culprit?

UPD
There is no access to the gateway, just as there is no access to network equipment. I'm just a member of this network, nothing more.

Reply

Answer the question

In order to leave comments, you need to log in

7 answer(s)

J

JDima, 2012-09-11
@JDima

switch the network to "promiscuous mode", run any sniffer, accumulate more or less capacious log

So what? You will accumulate your own packages, as well as broadcasts and very, very rare unicasts. Help a lot?
Seter17, there are three options:
1) Carry out an arp poisoning attack at the moment of braking and pretend to be a router for everyone around. Then you can already run wireshark.
2) Perform an attack on the switch CAM table (macof program) and collect traffic with wireshark.
3) Shake the administrator. Find out what the gateway is. Offer to raise a *flow collector, if there is no other way.
In any case, the first two points imply very bad, very noisy manipulations, and I would skip them if I were you.

J

jov, 2012-09-11
@jov

switch the network to "promiscuous mode", run any sniffer, accumulate a more or less capacious log. then just sort by the number of packets from one ip/mac address.

X

xandr0s, 2012-09-11
@xandr0s

Bring the admin a beer and find the culprit with him. Better yet, show tc. Well, if the network network can promiscuous mode - try something like wireshark in this mode.

A

Alex Belov, 2012-09-11
@Roosso

You need a proxy server or a hub (switch) in which you can enable logging. You can find out if the hub has logging support from its documentation.
Finding a good hub with quotas and DHCP is not difficult.
And you can (if any) take some kind of old computer, insert 2 network cards into it and make a proxy server out of it. On Win or nix it already depends on the abilities.
In general, what kind of hub do you have!?

C

Colobock, 2012-09-11
@Colobock

Having found out the MAC of the fluderast, what are you going to do next?

P

prox, 2012-09-11
@prox

Isn't it easier to buy mobile internet?

A

amc, 2012-09-12
@amc

It can be easier, during plugging - a patch cord into two adjacent sockets going to the switch. Repeat until the occupier is enlightened.
If so, I didn't recommend it to you.