On 25/03/15 11:43, Bjorn S. Nilsson wrote:
> Sometimes I would like to find out what client is the source of
> certain outgoing OpenVPN server packages. Or, more precisely, which
> client is communicating with a particular host. If this is possible,
>
echo status| nc manage.ment.ip mgt.port

ie ensure openvpn has "--management" configured, then you can query that
and it will tell you the name of the client cert, what local IP was
allocated and what their external IP is.

Then a packet sniffer (eg tcpdump) can be used to see what traffic is
being generated - either internal or external (obviously the external
will all be encrypted openvpn traffic - so it's not very interesting)

-- 
Cheers

Jason Haar
Corporate Information Security Manager, Trimble Navigation Ltd.
Phone: +1 408 481 8171
PGP Fingerprint: 7A2E 0407 C9A6 CAF6 2B9F 8422 C063 5EBB FE1D 66D1


------------------------------------------------------------------------------
Dive into the World of Parallel Programming The Go Parallel Website, sponsored
by Intel and developed in partnership with Slashdot Media, is your hub for all
things parallel software development, from weekly thought leadership blogs to
news, videos, case studies, tutorials and more. Take a look and join the 
conversation now. http://goparallel.sourceforge.net/
_______________________________________________
Openvpn-users mailing list
Openvpn-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openvpn-users

Reply via email to