R: Re: Monitor all outbound connections from apps in warden


Michael Grifalconi <michael.grifalconi@...>
 

Hello, thank you for the hint!

I'd prefer to do something at application level, like a shell script to run in parallel to the application that every X seconds prints the output of netstat, as the standard output is taken as a log on CF apps. Is it possible?

(I'm really sorry and embarrassed about the spam after my email signature, this is due to my University and I can't avoid it :/ )

Thank you,
Michael

Il 29/05/15 20:06, Dieu Cao <dcao(a)pivotal.io> ha scritto:


You could set up a security group that logs all outbound connections. These are logged on the DEAs.
You would then need to correlate the warden handle with the application.

I'm working with the docs team on getting this feature properly documented.


Relevant stories where this feature was added.
[1] https://www.pivotaltracker.com/story/show/73905126

[2] https://www.pivotaltracker.com/story/show/90078842



I don't know how you would do this via buildpacks.

-Dieu
CF Runtime PM






On Fri, May 29, 2015 at 6:59 AM, Michael Grifalconi <michael.grifalconi(a)studenti.unimi.it> wrote:

Hello all, 

How can I monitor (and log) all the outbound connection made from an application?

I would like to do by editing buildpacks:

edit the buildpack to run a netstat command every 10 sec and send a log of the estabilished connections..



I would also be able to sniff the traffic, is it possible to run a tcpdump with some filters and send logs with the result? All by editing the buildpack. I think the process will not have the necessary privileges..



Any hint is appreciated!

Thank you!

Michael



(http://www.unimi.it/13084.htm?utm_source=firmaMail&utm_medium=email&utm_content=linkFirmaEmail&utm_campaign=5xmille" target="1">
La tua firma per la sua idea. Per tutti noi
Per destinare il 5x1000 all'Università degli Studi di Milano: indicare nella dichiarazione dei redditi il codice fiscale 80012650158.



_______________________________________________
cf-dev mailing list
cf-dev(a)lists.cloudfoundry.org
https://lists.cloudfoundry.org/mailman/listinfo/cf-dev




_______________________________________________
cf-dev mailing list
cf-dev(a)lists.cloudfoundry.org
https://lists.cloudfoundry.org/mailman/listinfo/cf-dev


CF Runtime
 

I would expect this to be possible. The easiest thing would probably be to
write a shell script that both runs your application, and also starts a
script that does the netstat output. Then set that script to run as your
apps custom start command "cf push my_app -c run_app_and_log.sh".

Joseph Palermo
CF Runtime Team

On Mon, Jun 1, 2015 at 12:07 AM, Michael Grifalconi <
michael.grifalconi(a)studenti.unimi.it> wrote:

Hello, thank you for the hint!

I'd prefer to do something at application level, like a shell script to
run in parallel to the application that every X seconds prints the output
of netstat, as the standard output is taken as a log on CF apps. Is it
possible?

(I'm really sorry and embarrassed about the spam after my email signature,
this is due to my University and I can't avoid it :/ )

Thank you,
Michael


Il 29/05/15 20:06, *Dieu Cao * <dcao(a)pivotal.io> ha scritto:

You could set up a security group that logs all outbound connections.
These are logged on the DEAs.
You would then need to correlate the warden handle with the application.

I'm working with the docs team on getting this feature properly documented.

Relevant stories where this feature was added.
[1] https://www.pivotaltracker.com/story/show/73905126
[2] https://www.pivotaltracker.com/story/show/90078842

I don't know how you would do this via buildpacks.

-Dieu
CF Runtime PM


On Fri, May 29, 2015 at 6:59 AM, Michael Grifalconi <
michael.grifalconi(a)studenti.unimi.it> wrote:

Hello all,

How can I monitor (and log) all the outbound connection made from an
application?

I would like to do by editing buildpacks:

edit the buildpack to run a netstat command every 10 sec and send a log
of the estabilished connections..


I would also be able to sniff the traffic, is it possible to run a
tcpdump with some filters and send logs with the result? All by editing the
buildpack. I think the process will not have the necessary privileges..


Any hint is appreciated!

Thank you!

Michael
------------------------------

[image: 5xmilleUniMi]
<http://www.unimi.it/13084.htm?utm_source=firmaMail&utm_medium=email&utm_content=linkFirmaEmail&utm_campaign=5xmille>


* La tua firma per la sua idea. Per tutti noi Per destinare il 5x1000
all'Università degli Studi di Milano: indicare nella dichiarazione dei
redditi il codice fiscale 80012650158. *
_______________________________________________
cf-dev mailing list
cf-dev(a)lists.cloudfoundry.org
https://lists.cloudfoundry.org/mailman/listinfo/cf-dev

------------------------------

_______________________________________________
cf-dev mailing list
cf-dev(a)lists.cloudfoundry.org
https://lists.cloudfoundry.org/mailman/listinfo/cf-dev


_______________________________________________
cf-dev mailing list
cf-dev(a)lists.cloudfoundry.org
https://lists.cloudfoundry.org/mailman/listinfo/cf-dev