Handy network/security web analysis tool

somanyholes · Jun 12, 2009, 07:28:47

Think this may appeal / be of use to many on here.

Here's a nifty little tool to use in analyzing your network connection from the folks at ICSI at Berkeley. Useful for security or other purposes. ICSI Netalyzr link http://n9.netalyzr.icsi.berkeley.edu/

Rik · Jun 12, 2009, 09:37:56

Great link, So.

talos · Jun 12, 2009, 09:58:42

Very good and probably very handy, I just wish I knew what it all meant

Rik · Jun 12, 2009, 09:59:41

I was hoping that So would tell us.

somanyholes · Jun 12, 2009, 10:17:10

you lot know more that you are letting on

if you have queries just ask

Rik · Jun 12, 2009, 10:23:09

How long have you got, So?

Sebby · Jun 12, 2009, 13:18:01

I'm using IE6 here at work, and it doesn't seem to work on it (but then what does?!). I'll look later.

Steve · Jun 12, 2009, 13:35:34

This was the only real wobble it threw up

"Your ISP's DNS resolver requires 1700 msec to conduct an external lookup.
This is particularly slow, and you may see significant performance degradation as a result."

Same result with Opendns so I am not sure what that means or if its relevant . I would have thought that degree of delay would be noticeable.

kinmel · Jun 12, 2009, 13:57:06

It gives OpenDNS a clean bill of health and confirms that Idnet are not blocking any ports.

Als AVG proxies are correctly intercepting mail in both directions and my mail servers are not listed on Spamhaus

A very handy tool

zappaDPJ · Jun 12, 2009, 14:27:25

No real problems here. My system clock is 17 seconds off and www.capitalone.com is a dead URL. I think I can live with that

Sebby · Jun 12, 2009, 20:33:55

I'm home now and using a decent browser, so was about to run the test. My only problem is "Your DNS resolver returns results even when no such server exists", which is because OpenDNS takes you to their page in this case.

Simon · Jun 12, 2009, 21:00:54

Halfway through it, F-Secure flagged that a virus had been removed. Don't know what part that was, but the summary said:

# Certain protocols are blocked in outbound traffic
# Your computer's clock is slightly fast

somanyholes · Jun 12, 2009, 23:47:55

the virus alert is the eicar test file being downloaded, which will be used for checking if things are being filtered. Bit of info on it here, http://n9.netalyzr.icsi.berkeley.edu/faq.html#eicar . It looks like some of your tests have been blocked due to local security policies e.g. firewalls etc ...

Simon · Jun 13, 2009, 00:13:15

Yes, that's what it seems, So. At least I know my firewall is working.

Rik · Jun 13, 2009, 09:59:57

The one bit I didn't understand was this:

We estimate your uplink as having 840 msec of buffering. This level can in some situations prove somewhat high, and you may experience degraded performance when performing interactive tasks such as web-surfing while simultaneously conducting large uploads. Real-time applications, such as games or audio chat, may also work poorly when conducting large uploads at the same time.

Simon · Jun 13, 2009, 12:12:49

Rik · Jun 13, 2009, 12:15:09

Me too.

cavillas · Jun 13, 2009, 12:29:13

It doesn't seem to make any difference so I suppose it can be ignored...ignorance is bliss.

Rik · Jun 13, 2009, 12:29:54

I thought Bliss was a chocolate bar, Alf?

cavillas · Jun 13, 2009, 12:52:28

Ahh!!

Normality reigns again

Rik · Jun 13, 2009, 12:57:26

It does, Alf.

Steve · Jun 13, 2009, 17:49:36

Quote from: Rik on Jun 13, 2009, 09:59:57
The one bit I didn't understand was this:

We estimate your uplink as having 840 msec of buffering. This level can in some situations prove somewhat high, and you may experience degraded performance when performing interactive tasks such as web-surfing while simultaneously conducting large uploads. Real-time applications, such as games or audio chat, may also work poorly when conducting large uploads at the same time.

I got this also, I wonder whether one function of a modem is to act as a buffer to permit a continuous stream of data to be sent.

Rik · Jun 13, 2009, 17:57:32

It's possible, Steve.

somanyholes · Jun 15, 2009, 11:00:22

have a read of http://n1.netalyzr.icsi.berkeley.edu/info_buffer.html

I don't get that error from work. Will try it from home when I get in, again that won't be an idnet connection...

Rik · Jun 15, 2009, 11:02:56

Any idea if we can control the buffer size, So?

somanyholes · Jun 15, 2009, 11:07:52

your going to need some type of tcp optimiser which you can use to mod down and up. Perhaps tcp optimiser? I'm not sure what apps there are beyond that. will do a bit of digging.

Rik · Jun 15, 2009, 11:08:56

Thanks. I don't recall seeing anything on buffer size in TCPOptimizer.

somanyholes · Jun 15, 2009, 11:30:35

ok so far it looks like registry hacking so far ..

Rik · Jun 15, 2009, 11:34:26

How would we determine a 'good' value, though?

Steve · Jun 15, 2009, 12:01:06

Just had a peep at the DG834N system "log" it reports a buffer and a swap file size

Rik · Jun 15, 2009, 12:05:45

I've not noticed that in the 2700. Anyone else?

Steve · Jun 15, 2009, 12:22:55

The Netgear utilises "busy box" and if you use the DGteam firmware you can see all the relevant "machine" stats, however you cannot alter them via the DGTeam GUI ,whether you can do this via CLI I don't know and never will.