Results 1 to 5 of 5

Thread: Monitor network smtp traffic

  1. #1
    Join Date
    Sep 2007
    Location
    Olympia, Washington
    Beans
    548
    Distro
    Ubuntu

    Monitor network smtp traffic

    I want to monitor all outgoing smtp traffic on my employer's network. Someone is using their 3rd party smtp server instead of ours and I want to monitor how often this server is being used. I have tried Wireshark and Darkstat, however they only seem to capture port 80.

    Anyone have an idea?
    ~Mark
    http://nwlinux.com - tech blog

  2. #2
    Join Date
    Apr 2005
    Beans
    4,334
    Distro
    Ubuntu Development Release

    Re: Monitor network smtp traffic

    sudo ifconfig <iface> promisc

    sudo tcpdump -i <iface> port 25 and host <host you think is the problem>

    or

    sudo tcpdump -i <iface> port 25 > output.txt

    Then control+c when you think you have enough traffic to analyse it. I usually do a cat output.txt | less , and just search through until I find it.

  3. #3
    Join Date
    Sep 2007
    Location
    Olympia, Washington
    Beans
    548
    Distro
    Ubuntu

    Re: Monitor network smtp traffic

    That is what I am looking for. However, this is my Terminal return:
    Code:
    ifconfig 192.16.1.118 promisc 
    192.16.1.118: ERROR while getting interface flags: No such device
    The 118 is my internal lease.
    ~Mark
    http://nwlinux.com - tech blog

  4. #4
    Join Date
    Apr 2005
    Beans
    4,334
    Distro
    Ubuntu Development Release

    Re: Monitor network smtp traffic

    no, you need to promisc the interface

    so like this

    sudo ifconfig eth0 promisc

    sudo tcpdump -i eth0 port 25 and host <host you think is a problem>

  5. #5
    Join Date
    Sep 2007
    Location
    Olympia, Washington
    Beans
    548
    Distro
    Ubuntu

    Re: Monitor network smtp traffic

    Man, I am clueless this morning. Got it. Thanks for the assisitance!

    ~Mark
    ~Mark
    http://nwlinux.com - tech blog

Tags for this Thread

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •