Linux Certif

Toute la documentation sur la certification Linux LPI

hosts3d

NAME

hosts3d - 3D real-time network monitor

SYNOPSIS

hosts3d [-f]

DESCRIPTION

Hosts3D is a 3D real-time network monitor, displaying hosts and packet traffic. Features include support for multiple sensors, analysis of packets to gather hostnames and services, configurable layout of subnetworks, recording/replaying of packet traffic, and the ability to filter packets by hosts, protocol or port.

-f

Display full screen.

Press H key in Hosts3D to show controls.

DATA FILES

Created in directory ``.hosts3d/''.

controls.txt

Controls

settings-hsd

Settings

0network.hnl

Network Layout On-Exit

1network.hnl

Network Layout 1

2network.hnl

Network Layout 2

3network.hnl

Network Layout 3

4network.hnl

Network Layout 4

netpos.txt

CIDR Notation Net Position/Colour

traffic.hpt

Packet Traffic Record

tmp-hinfo-hsd

Temporary Information

tmp-netpos-hsd

Temporary Net Positions

tmp-flist-hsd

Temporary Working Directory File List

NET POSITIONS

If a host is not a member of any net position entries, it is placed in the Grey Zone. If a host is a member of multiple net position entries, the first entry is used. Line format for net position entries is "pos net x-position y-position z-position colour",
eg. "pos 123.123.123.123/32 10 0 -10 green".

Positions:

Grey/Red

positive x-position

Blue/Green

negative x-position

Up

positive y-position

Down

negative y-position

Grey/Blue

positive z-position

Red/Green

negative z-position

Colours:

none (where multiple colours are used), default (grey), orange, yellow, fluro, green, mint, aqua, blue, purple and violet.

START/STOP LOCAL hsen

The user starting Hosts3D must be in the /etc/sudoers file, as by default Hosts3D will start/stop the local hsen via a terminal with sudo. Thus the system may prompt for a password when starting/stopping a local hsen. The local hsen is stopped using the command "pkill hsen", which will kill all hsen processes.

NOTES

Firewall configuration: hsen talks to Hosts3D via UDP port 10111. If hsen is running and Hosts3D is not, ICMP Port Unreachable (UDP port 10111) may be generated. Hosts3D logs to syslog, check when troubleshooting. By default hosts are added from packet source IP address, option Add Dests will also add from destination IP address. If show broadcasts is off, a (B) indicates broadcast present. Anomalies are a new host or host service. Using the menu options to move/arrange a few thousand hosts may take a few minutes. Deleting hosts, updating net positions, using the menu options to move/arrange hosts, or clearing/restoring a net layout will cause packets to be dropped, thus affect packet recording. Clicking a multiple host object will cycle through selecting hosts within.

SEE ALSO

hsen(8)

AUTHOR

Written by Del Castle.

REPORTING BUGS

Report bugs to <hosts3d@gmail.com>.

COPYRIGHT

Copyright (c) 2006-2009 Del Castle
This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 2 of the License, or (at your option) any later version.
This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details.