Server Fault Stack Exchange
Server Fault Stack Exchange

Questions tagged [analysis]

59 questions
3
votes
2 answers

The "right way" to use sysdig? remote?

I was wondering if it is possible to let sysdig run as a background process and rotate the logfile just for an example every time it gets over 100mb or every 7 day? and is there anyway i could setup a remote server for the sysdig files? just so i…
Daniel Guldberg Aaes
  • 421
  • 1
  • 7
  • 13
3
votes
1 answer

Is there a way to determine the log format if given a ".log" file?

Is there a way to determine the kind of log (so that it can be parse correctly) if I have no prior information about the type (for eg. syslog, apache log, IIS log) of log it is? I am trying to write a Grok filter for the logs but I have no idea what…
shruti gupta
  • 33
  • 1
  • 4
3
votes
2 answers

How can I use grep to find the most frequently recurring errors in my log file?

I've got a PHP application that is generating large amounts of warnings and notices in the log file.. I'm fixing these one at a time. I would like to be able to fix the most frequently occurring first in order to maximize the amount of effect my…
Edward Tanguay
  • 1,209
  • 4
  • 22
  • 31
3
votes
4 answers

Wireshark - Graphic analysis tool. anyone knows?

Does anyone knows a graphical tool to analyse wireshark captures? Like something that can agregate traffic by ip's and by protocol and show's it graphicly. Anyone knows a freeware/opensource utility? Thanks
Flip
  • 109
  • 1
  • 3
  • 11
3
votes
1 answer

Analysing Request Time Taken to Find Slow Pages

I'm looking for pages that are slow on a large custom PHP CMS website. I don't want to dig around in the existing badly none documented code and found that apache access logs can display the time taken to serve the request, in seconds and…
AnnanFay
  • 610
  • 2
  • 7
  • 13
2
votes
2 answers

Data Analysis for Spoofed DNS

A remote nameserver, that I do not have privileges on, is intermittently responding with spoofed addresses. I want to monitor this server and collect data on the spoofed responses for analysis. How should I go about doing this? I essentially want to…
N.Balauro
  • 41
  • 5
2
votes
0 answers

Poolmon Nonp total bytes not equal to Perfmon Memory > Nonpaged Pool Bytes

We are monitoring a server for a potential Nonpaged Pool memory leak. So we setup a cmd batch file to output to the Nonpaged Pool allocation every 10 mins. We also setup a perfmon counter log to capture Memory > Nonpaged Pool Bytes. As well as an…
Jacques Thomas
  • 21
  • 1
  • 2
2
votes
5 answers

central apache log analysis of many hosts

We have 30+ apache httpd servers, and are looking to perform analysis on the logs both for historical trending and near "real time" monitoring/alerting. I'm mainly interested in things like error rates (4xx/5xx), response time, overall request rate,…
Jason Antman
  • 1,536
  • 1
  • 12
  • 24
2
votes
3 answers

Tools to analyze traffic through a firewall?

We have a pfSense setup with 2 WAN connections (3Mb/s and 17Mb/s) and are using tcpdump to log connection setup and dns requests. We'd like to analyze the places being connected to with an eye toward watching for trojans and other dial home…
boatcoder
  • 548
  • 2
  • 5
  • 19
2
votes
2 answers

CLI tool for analyzing pcap captures

I am looking for a command line tool that will look at a capture file, tcpdump -w output, and give output equivalent to the information you get in the Wireshark conversations, and endpoint statistics. To give you a little background, I have the…
Zoredache
  • 130,897
  • 41
  • 276
  • 420
2
votes
3 answers

What is a good sendmail log analyzer?

We had a recent event where one of two servers running sendmail stopped sending mail, and built up a 7000 message queue before we noticed / fixed it. It's fixed now, but we don't know why it failed, and this part of the system is important but…
jldugger
  • 14,342
  • 20
  • 77
  • 129
1
vote
4 answers

How can I interpret a windows dmp file analysis using Windbg?

I have uploaded the full debug output here. I've got a Windows 7 RTM 64 bit machine that is crashing intermittently and I managed to load the correct symbols and get what seems to be a proper analysis. I don't know where to go from here or go about…
user26105
1
vote
1 answer

Measure/track page load times

I have a few employees who only have access to one website. This website they use for absolutely everything they do and they have started to tell me how slow it is as certain parts of the day. At certain parts of the day when it becomes really bad,…
rodey
  • 253
  • 1
  • 5
  • 12
1
vote
3 answers

Tool to analyze postfix maillog

I have a mailserver running on iRedMail. Recently we have some issues that people reporting they would receive phisihing emails from us, which haven't been sent by the users they are saying the are coming from. Is there a tool (offline is fine too)…
Andreas Hinderberger
  • 142
  • 2
  • 2
  • 10
1
vote
1 answer

Exclude an IP address from an openwrt firewall rule

I am using a wrt54gl with openwrt to try and redirect all traffic on my LAN to a specific server, which will run scapy and other network analysis tools and act as a gateway/firewall to the Internet. So far, I have managed to redirect all LAN traffic…
charles
  • 11
  • 2
1
2
3 4