Koozali.org: home of the SME Server

How-to Logging a in coming data stream?

Offline HomePlayer

  • ***
  • 55
  • +0/-0
How-to Logging a in coming data stream?
« on: March 06, 2008, 04:15:19 PM »
Some how I can’t find what I am looking for,

I would like to log a incoming data stream from a GPS/GPRS unit it can send its data to;
Poort XXX and Ip xxx.xxx.xxx.xxx

Any comment are welcome, if I know where to look ill will find the rest, for now i am standing infront of a brick wall

Tanks to ALL,

Offline arne

  • *****
  • 1,116
  • +0/-4
Re: How-to Logging a in coming data stream?
« Reply #1 on: March 07, 2008, 10:23:57 PM »
The first thing I am thinking at is ethereal that can run under Xwin as "ethereal" or at a text based server as "tethereal". I used it quite much before, for analyzing traffic, but I can not remeber if it also was at the SME server as platform, but I guess it was. (99 % sure about that.) http://www.ethereal.com/

It could also be done using the log function of iptables, eventually filtering on ip, port, protocol etc ..

***

Correction: I guess that the iptables can still not do it for this situation. It is relatively easy to set up iptables to log certain dropped packets, but you can not log packets that just pass trough (??!!). On the other hand ethereal should be able to do it (?!).
« Last Edit: March 07, 2008, 11:14:44 PM by arne »
......

Offline CharlieBrady

  • *
  • 6,918
  • +3/-0
Re: How-to Logging a in coming data stream?
« Reply #2 on: March 08, 2008, 09:28:01 PM »
Correction: I guess that the iptables can still not do it for this situation. It is relatively easy to set up iptables to log certain dropped packets, but you can not log packets that just pass trough (??!!).

iptables only logs packet headers, not packet content. It can log any packet, not just dropped packets.

Quote
On the other hand ethereal should be able to do it (?!).

tcpdump can be used to perform packet capture, and is included with SME server.

Ethereal has been forked - the maintained GPL version is now called wireshark. You can use wireshark to visualise packet captures which have been made using tcpdump. You'd run wireshark on a workstation, not the server.


Offline ked

  • **
  • 21
  • +0/-0
Re: How-to Logging a in coming data stream?
« Reply #3 on: March 11, 2008, 03:42:10 AM »
like to log a incoming data stream from a GPS/GPRS unit

Do you mean GPS as in Global Positioning System?

If so, gpsd (gpsd.berlios.de) is v. good.

Otherwise ignore me  :)

Offline thomasch

  • *
  • 232
  • +0/-0
Re: How-to Logging a in coming data stream?
« Reply #4 on: March 11, 2008, 04:31:04 AM »
You'd run wireshark on a workstation, not the server.

Wireshark can run on SME server but no GUI.

Offline CharlieBrady

  • *
  • 6,918
  • +3/-0
Re: How-to Logging a in coming data stream?
« Reply #5 on: March 11, 2008, 06:21:07 PM »
Wireshark can run on SME server but no GUI.

It can, but I wouldn't recommend anyone do it. I would run it only on a workstation (and never as root).

Offline HomePlayer

  • ***
  • 55
  • +0/-0
Re: How-to Logging a in coming data stream?
« Reply #6 on: March 11, 2008, 10:33:53 PM »
Oke i have some more things to read thanks all,
today I installed Wireshark on a winXP running on VMware on SME,
I think this is what i am looking for, have still to read how it all works