Logging internet traffic

Is there anything in Leopard that allows me to track any external access from the internet?
I recently had my mailbox Hijacked on my ISP and somehow they managed to change the password on the webmail server and it appears used my email address to send the usual phishing crap. They didnt get it from me. I dont keep passwords on my Macs in plain language but I want to make sure that there has been no unauthorised activity from the net.
I dont open or respond to anything that I dont know or understand. I am morelikely to junk valid emails than open invalid stuff
Its not the first time that I have had issues with my ISP. Seems to me that they have been hacked esp as Comcast denies all emails from this ISP because quote"80% of emails from your part of the world are genreated by your ISP " unquote

If your Mac's firewall is off, turn it on.
Little Snitch might help you out:
http://www.obdev.at/products/littlesnitch/index.html
~Lyssa

Similar Messages

  • Logging iphone internet traffic

    According to the phone company, I have a few 50 MB downloads every month. 50 MB! that's huge! The most recent one was yesterday, and there is nothing that makes sense to me about this. I just don't use the internet/apps/video to that degree. I've asked the phone company to at lease give me the address that is being accessed. That way I would have some clue as to what was going on, but they refuse. This is very frustrating, most usage is below 100 KB, but these spikes force me into a new data plan.
    Now I would like to take this into my own hands. I'm hoping for a way to log all internet traffic on my phone so that I can see what is going on here. Is there a way to pull a log off the iphone or otherwise log all internet traffic on the phone?

    Interesting. I could use Dataman to see if the phone company is cheating me, but I suspect that they are not, I just don't know where the problem is coming from. (I was not using the GPS)
    If this is real usage on my phone, I think it is happening in the background. I suspect that the email client may be connecting to an exchange server in the background, but that still does not justify 50MB that I can see. I'll give Dataman a try to see what I can find out. Anyone have any other ideas on how to log internet data in a way that shows what is being accessed?

  • Mountain Lion Server VPN unable to route internet traffic

    Hi! I have set up a VPN server on my home network specifically so that I could connect via a VPN client remotely and tunnel all internet traffic through my home network (It is a long story but I need to be able to access services that are specific to my home IP . . . ) I have been tearing my hair out trying to get it work but can not. The VPN connection happens OK and I can set up the remote client to send all traffic via VPN but any internet traffic just times out . . . In other words I can not get the server to share my home network via the VPN connection.

    Hi and thanks for taking the time to answer.
    As I am sure you have guessed I don't have much experience or knowledge with this. So I will try to clarify what I am trying to do.
    I do not need a VPN server for the conventional reasons of being able to access a private network (i.e my home network) remotely, although this is a nice additional benefit. I need the VPN server so that I can log in remotely (when I am using my mobile broadband or when I am overseas for example) and make it look like the machine I am using is on my home network.
    The reason for this is that I have access to web services that are IP specific. That is I can ONLY log in if I am logging in from my registered home IP (which is static for this exact reason).
    I have been told on similar support sites that if I route ALL traffic through the VPN, then when I use my browser on the remote machine all web traffic will go through the VPN as well and it will look like the traffic is coming from the subnet of my home IP.
    I guess in other words I am trying to use my VPN as an "anonymous" proxy (anonymous in the sense that although the traffic is coming form somewhere else, it still looks like it is coming from my home IP).
    I know this will cripple the speed due to the narrow upstream bandwidth but I am willing to pay this price.
    Now as for your questions:
    I have the server set up on a machine on my home subnet and I have enabled VPN port forwarding on the ADSL router.
    I know the connection happens as when I connect the VPN either from my iPhone using 4G or my laptop using my mobile broadband I get the "connecting . . . authenticating . . . connected" messages and when I check in properties it shows it to be connected to my home IP as VPN server and has an IP address that looks like it is on my home subnet.
    By internet traffic timing out I meant web traffic.
    As I mentioned above, I need all web traffic to go through the VPN. So indeed not ALL traffic but definitely ALL web traffic. The only way I could find to do this is to enable the "Send all traffic" option.
    Now I guess the obvious question is why am I not using a proxy. I have tried (and spent ages setting up Squid) but could never get it to "hide" the true origin of the traffic completely.
    Now having written all this, I reinstalled mountain lion and server yesterday (out of sheer frustration rather than anything else) and it seems to work this morning. So if I log in via VPN on my mobile or laptop and use an IP checker on the web it comes up with my home IP : ))
    The only thing I have now noticed is that if the VPN server stops working (which seems to be as soon as the computer I run it on goes to sleep) web traffic reverts to using the normal channels which is potentially problematic for me.
    So my questions now are -
    Any ideas what I was doing wrong in the first place?
    Any suggestions on how I could set this up better?
    Any way to set up the remote device so that it only allows web traffic via VPN (so that if the VPN connection drops, it is unable to use it's own internet connection for continuing web traffic)?
    Thanks for any suggestions : )
    Cheers

  • How can I route internet traffic over IPSec point to point?

    I have a remote site that connects by IPSEC with the end points on a router and ASA. The connection is working fine and the remote site can access my other networks at the main headquarters. The problem is, currently this remote site is accessing the internet via the same link that is supposed to VPN everything back to headquarters. I need to figure out how to VPN their internet traffic to my main headquarters. There's an IPrism behind the firewall to filter web access so it seems like I need to point the remote sites default gateway to my routing device that's behind my Iprism? 
    Also, currently the outside interface on the remote site's router does not have an ACL applied, can someone suggest what that ACl should look like? Thank you for your help! Here is a sample configuration of the remote site's router:
    crypto isakmp policy 20
    (encryption parameters here)
    crypto isakmp key password address x.x.x.x (Public ASA IP) no-xauth
    crypto ipsec transform-set remotesite (encryption parameters here)
    crypto ipsec df-bit clear
    crypto map Mainsite 1 ipsec-isakmp
     set peer x.x.x.x (Public ASA IP)
     set transform-set remotesite
     match address 100
    interface FastEthernet0/0
     description $ETH-LAN$
     ip address 10.1.1.1 255.255.0.0
     ip nbar protocol-discovery
    interface FastEthernet0/1
     description ISP Interface
     ip address x.x.x.x (public IP) 255.255.255.0
     crypto map Mainsite
     crypto ipsec df-bit clear
    ip route 0.0.0.0 0.0.0.0 x.x.x.x (ISP's default gateway)
    access-list 100 remark Access list Mainsite Access
    access-list 100 permit ip 10.1.0.0 0.0.255.255 10.3.0.0 0.0.255.255
    and other various headquarter networks...

    Hi Mark, you can modify your crypto acl to permit any any on your remote site which will make all traffic goes through the tunnel. Then on ASA you need to do hairpinning on the outside interface. This will make users on remote site to access internet via HQ. But if you do it this way the internet traffic goes straight to internet without having them filtered by your iPrism. 
    What I am not sure about is if there is a way to do it if you want those traffics to be filtered by the iPrism before going out to internet. 
    HTH

  • How do I get the internet traffic to come to my own server?

    If I'm moving from paying a host for coldfusion to using my own license on my own server, How do I get the internet traffic to come to my own server?

    You connect the computer to a network.  This is pretty much automatically handled by the hardware and the operating system.
    You may want to read up on some of the basics of networking and the tcp/ip world.
    To have a networked computer tell you its IP address type 'ipconfig' at a dos command line.

  • Loosing battery from internet traffic all the time

    4 days ago i have bought an iphone 5
    previous one was an iphone 4
    my problem is the iphone 5 all the time spending my internet traffic, but i turned off all the push notification and etc apps whiches use the inernet....
    because of that my iphone loses battery for 2-3 hours
    HELP ME PLEASE !

    I have another computer connected
    to this network in another part of the house
    If that is a Windows XP computer make sure it is not trying to do an 802.1x authentication since that will cause those interruptions:
    http://www.efelix.co.uk/tech/1010.html
    Ensure that the Enable IEEE 802.1x authentication for this network check box is not checked.
    Also, upgrading to Service Pack 2 should take care of that problem.
    Otherwise, Airports are a reliable product so perhaps you are in an area of interference? Pick a different channel - like 9?

  • Out-of-control consumer Internet traffic by apple tv

    Out-of-control consumer Internet traffic by apple tv
    Greetings
    I recently bought an Apple TV, but since then I is the intensity of Internet traffic. Kindly advise me please, why does this happen? Secondly, what is the solution? I only use this machine for Airplay, and I do not want to use the Internet.

    What are you talking about?
    Please clearly explain what the issue is.

  • Understanding 5505 firewall-site to site and internet traffic

    Hi,
    My question is mutli-faceted. I apologize for the lengthy intro here but i think the info is necessary to understand where I am headed in this.
    I am new to the cisco 5505. I have had very limited exposure to a 5510 that was preset. I have managed to make modifications to it here and there, but dont completely understand how it was put together. I learn by watching, listening, and gleaning what I can from others. I have had no formal training in CLI, but I have learned some of the commands. I know enough to be dangerous, but I respect my limitations.
    That being said, I have been charged with setting up a 5505 at a remote site. I need to accomplish several things.  Our ultimate goal is to use this device as a site to site with the 5510 at the corporate office. However, I need to accomplish this in baby steps, test, test real users and then maybe convert in full. Where I could outsource this in its entirety, that would preclude me from learning so I can address this in the future on my own.
    We need to have this in place by the end of February 2013.
    Currently the remote site is connected via a very slow (by todays standards) T1 line on a MPLS. Stable. Works, but slow. All internet traffic as well as work traffic is routed through that connection. We have added a 50mb cable connection (with static ips) to the office. First we want to set up the 5505 so that it can be used as follows:
    1, Internet traffic can be routed out through this device and all other "work" traffic routed through the MPLS.
    2, Test using this connection as a route out to the internet AND use it as a site to site VPN connection to the home office. (or anyconnect vpn)
              I need to be able to have users in both environments. IE, some still using step 1 and some starting to use and test step 2.
    3, long term, use this as the main connection per number 2, but add the IP address so that if the cable connection drops, the office can access internet via the VoIP T1 line as a life line.
    In all cases, I dont want internet going through the home office as it currently is traveling.
    I have done a lot of searching but so far have come up empty with answers.
    Question 1:     (This one probalby shows my ignorance the worst) - in using the 5505 firewall, will it segregate normal internet traffic from the VPN traffic when used by the workstation? Using the Gui, I didnt see where this was necessarily happening. Do I need to use CLI language (and what) to make this happen? Or is that a basic function that happens during the setup of the firewall using the GUI. Do I need to do some sort of "split tunneling"?
    Question 2:     Do I use this device as the Default gateway for both step 1 and 2/3) for normal use and then change the gateway on the Pcs to the VoIP network during emergency use,(that would bypass the firewall though or is there a way to have it route to that router if there is no connection through the Outside port? Or as long as I have some access to the device, can I make a change remotely to help accomplish this failsafe?
    Question 3:     We have 25 Anyconnect VPN licenses. Should we use these and not the Static site to site, if so, why or why not? They dont need to be used at all.
    Question 4:     In setting up the VoIP line for backup, would using that on the "DMZ" connection help in making this viable so that the device could still ultimately control the internet traffic?
    Question 5:     In setting up the VPN connections, unless i am getting the two methods confused, I will need the 5505 to hand out IP addresses for the vpn connection. I see in using a class c schema that i can use 92.168.0.0 to 192.168.255.0. So for instance, I could use 101.1.20.0 for the inside network Vpn addresses?? I need to stay away from 192.168.0.0 networks as we use that in our normal structure.
    Reasons for setting this up:
    Slow speeds over the T1.
    increasing demand for Skype, Video conferencing etc that the T1 pipe couldnt adequately handle
    Lack of backup pathways for downed connections - ie, backhoe chopping through wire at a construction site).
    I read through the Getting started guides on both the 5510 and the 5505 and feel I can likely get the site to site setup (I have a list of all the Ip addresses i need for inside networks and outside networks etc.
    additional notes:
    I have to email ATT anytime I want a change made on the MPLS router, so doing as little to that as possible would be good.
    I will be onsite for testing at the end of February  and will have direct access to the home office via other methods to work on the asa5510 if any additional work needs to be done on it once i am onsite.
    Thanks for taking the time to read through all of this. please forgive my lack of knowledge...
    Dave

    Thanks for getting back to me and so quickly!
    1) I am not sure if I understand the “ACL” portion of your question, but this is how I want to access info via the VPN tunnel:
    192.168.D.0 inside(NJ) to outside 5505 - 12.175.X.X to outside 5510 - 12.200.X.X to inside network (HQ)192.168.X.0. Routes are needed to find subnets 192.168.A.0, 192.168.B.0 and 192.168.C.0. The default gateway to those subnets right now is: 192.168.X.XX4 inside of HQ. This would be so that the NJ office could find resources of the other offices if needed. This will change as we wean off the MPLS. Inside the ASA 5505, the IP addresses are 192.168.D.0 for data, 10.X.X.0 for the Phone system. All other traffic would be sent out through the internet. Phone system uses the XOcomm conection to route phone traffic.
    2) I did some reading on SLA. Thanks for pointing that out. For purposes of learning here, I am showing this as 12.175.XXX.XXX for Comcast and 12.200.XXX.XXX for XO comm.
    4) I guess I would use an Outside 2 as that makes sense, in description, I would label them “ComCast” for outside 1 and “XOcomm” for outside 2.
    5) I am still not sure I understand this part. Are additional IP addresses needed for the Site to site VPN to talk to the local hosts, or will it use the IP addresses assigned by the local server?
    Next Steps
    1-         Configure the ASA5510 for the 5505 connection
    2-         Configure the ASA5505 for the 5510 connection
    3-         Configure SLA for Comcast and XOcomm outside connections
    4-         For this I need help….I think this is from step 1, but I need help to configure the internet to be segregated via my question from #1. Have I given enough information to do so? Please advise on ACL entries, and route statements needed so that NJ can talk to all the offices when using this connection, not just the Headquarters.
    Thanks
    dave

  • Dmvpn wtih backhauled internet traffic to central site

    using dmvpn,but backhauling internet traffic over dmvpn to central site for monitoring, etc.  This unfortunately has the side effect of breaking spoke to spoke dynamic tunnels.  Anyone know a work around?

    For this Scenario you can put your internet-link into a different VRF. The differences to a "normal" DMVPN-config are the following:
    interface GigabitEthernet 0/0
    description Connection to ISP
    ip vrf PUBLIC
    interface Tunnel1
    description Tunnel to Hub
    tunnel vrf PUBLIC
    ip route vrf PUBLIC 0.0.0.0 0.0.0.0 GigabitEthernet 0/0

  • Is there a way to log all traffic on a CAN port in VeriStand?

    Hello,
    I'm looking for a way to log all traffic on a given port in VeriStand.  Basically I'd like to assign a DBC file to that port and then simply log everything but I can't see a way to do this in VeriStand.  I've tried the Raw frame logging and choosing the "log entire bus traffic" option but end up with just a single channel "Engine Timestamp".  I'm currently using the embedded data logger but that requires me to have imported the frames I want to log and the DBC file is simply too big for VeriStand, it doesn't seem to be particularily efficient at adding additional CAN frames and to try and add the entire DBC file essentially locks up VeriStand.  Any suggestions or something I've simply missed?  Thanks.
    Post CLD and when I'm a CLA when someone asks who I am, I can spin around in my chair and say "I am... the architect."

    Thanks for the update! If anyone else has the same question, the answer is that in order to extract the bus log information in the TDMS file, you should use the DIAdem Bus Log Converter tool. It is expected (though confusing) that the file looks mostly empty in the Data Portal until you use this tool to extract the information.
    Also, this is a fantastic tutorial from a very bright engineer on how to correlate data from multiple sources, such as raw frame files, in DIAdem. Highly recommended reading. It also has some data on the bus log converter.
    Jarrod S.
    National Instruments

  • How to redirect Internet traffic from RV082 to RV042 through a VPN Tunnel??

    Fellows,
    We have offices in USA and Venezuela.
    In our USA office we have a RV042 router and in Venezuela we have a RV082 router.
    We have connected a VPN tunnel (gateway-to-gateway) between both offices.
    The point is:
    How   could we redirect the internet traffic from our Venezuela office   (RV082) to the USA Office (RV042) to navigate using USA public IP's?
    The   reason for this is that we need to use online streaming services which   are only available for IP's from USA and we can't use them from the   Venezuelan IP's.
    We  can not use the PPTP option since the  equipment which will use the  streaming services (like hulu, crackle,  etc.) in Venezuela is a Google  TV device which doesn't allow the  configuration of proxy navegation or  PPTP VPN connections itself. That's  the reason why we need to do that  through the routers.
    We will really appreciate your support on this matter.
    Daniel

    Hi Daniel, this is called ESP wildcard forwarding which the router does support.
    https://supportforums.cisco.com/docs/DOC-12534   <- This is older but applicable
    https://supportforums.cisco.com/message/3766661
    -Tom
    Please mark answered for helpful posts

  • Windows VPN internet traffic handling

    So at work, I installed Windows 2012 R2's built-in VPN server. I can connect to it from home (using Windows 8.1), but I noticed that when the VPN connection is enabled, all internet traffic that would normally go to my local gateway is now going into the VPN line to my office's gateway and thereby going through my office's firewall. So my home browsing activity is being transacted as if i'm in the office.
    I'm about to roll-out the VPN to the rest of the office but want to see if there's anything I can do to change this behavior. The SonicWall NetExtender VPN doesn't do this.
    This topic first appeared in the Spiceworks Community

    Hi Ross,
    You can do this in several ways:
    1. If your proxy is to be configured on the computer browsers (like ISA proxy), then simply add the traffic from the PCs to the IPs of the proxy to the VPN ACL and to the nonat (with deny).
    2. Add all traffic over VPN from the user subnet. At this time you can remove the NAT commands all together since no NAT is required anymore. You can use this even if the proxy is something like Websense that works by sniffing the traffic.
    Please rate if this helped.
    Regards,
    Daniel

  • ASA5510 w/ (2) Internet Connections: Dedicated VPN traffic, Dedicated Internet traffic?

    We have an ASA5510 and we're currently using 1 internet connection to handle our site-to-site VPN connection and our internet traffic. We have a second internet connection on hand. What we would like to do it use BOTH internet connections: (1) will be dedicated to our VPN connection, (1) will be handling all our internet traffic. How can we get this setup? We're running Software Version 8.4(1)

    See below, this discussion will provider guidance as to how to setup your topology.
    https://supportforums.cisco.com/message/3359963#3359963
    Don't forget to rate all posts that are helpful.

  • I having pair of ASA 5520, between a day my internet traffic stops & to resolve i have to make secondary firewall active

    I have I having pair of ASA 5520, between a day my internet traffic stops & to resolve i have to make secondary firewall active using "failover active"
    the Memory utilization is in between 89-93 % but cpu is in between 34 to 45 %.

    Any one yet? Does it sound very unfeasible ?

  • How many MB of internet traffic do you generate with iphone 4s?

    hi Everybody,
    with my iphone 4s i generate a huge amount of internet traffic.
    In 15 days almost 1GB.
    Never had such a huge traffic with my prevous iphone 4 neither with ipad3.
    SIRI is disabled but i do not really understand what is the cause.
    Obviously also the battery goes down quickly. I tried to wipe the phone and setup it again W/O restoring the backup. Same problem.
    Have you experienced the same issue?
    thank you,
    Alessio

    iphone home screens do not rotate. some apps support rotation but many do not. In either case the Home screen will always remain in the vertical orientation. I suggest that you back up your phone. Then get the phone replaced or repaired. Make an appointment at an Apple Store to have your device examined by a technician. Or contact Apple Support.

Maybe you are looking for