Memanfaatkan sysctl untuk memantau Incoming Traffick – FreeBSD

Sysctl is an interface for examining and dynamically changing parameters in the BSD and Linux operating systems. The implementation mechanism in these two systems is very different.

In BSD these parameters are generally objects in a management information base (MIB) that describe tunable limits such as the size of a shared memory segment, the number of threads the operating system will use as an NFS client, or the maximum number of processes on the system; or describe, enable or disable behaviors such as IP forwarding, security restrictions on the superuser (the “securelevel”), or debugging output.  In BSD a system call or system call wrapper is usually provided for use by programs, as well as an administrative program and a configuration file (for setting the tunable parameters when the system boots).

We’ll gonna try on FreeBSD environtment, and use tcp log feature for monitoring all connection input traffick .

DMZ# sysctl net.inet.tcp.log_in_vain=1
net.inet.tcp.log_in_vain:0 -> 1
DMZ# tail -f /var/log/messages

Continue reading “Memanfaatkan sysctl untuk memantau Incoming Traffick – FreeBSD”