Dude Setting as windows service

This is a general how to, for running dudes as a windows service...

First question: why would you run dudes as a windows service???

Verry simple: dudes is a ideal program for network monitoring, but if you want good network monitoring, you need a server for this. The problem with dudes at the moment is that it requires a user to be logged on, if you log off it terminates dudes. running dudes as a service enables you to have dudes running on one server, and use a client to connect to it. Never again look at your dudes server, it will be running, and doesn't need logging in.

this is how you do it...

Find a copy of srvany (you can get it for free on the MS site) Copy SRVANY.EXE and INSTSRV.exe to your system folder (c:\windows, c:\winnt)

Issue the following command in a dos prompt...

INSTSRV dudes c:\winnt\srvany.exe

This will create a windows service called dudes, but it still doesn't do anything. set it to automatic startup in the service console, in the administrative tools section. also do not enable "Allow Service to Interact with Desktop" this is gives you some enoying windows. Choose your service restart policy, i do a restart service if dudes terminates for some reason.

Now open regedit and go to this key:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dudes

create a 'Parameters' key under this reg key.

now in HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dudes\Parameterscreate an 'Application' value of type REG_SZ and specify there the full path of your app executable (including the extension). for example C:\Program Files\Dude\dudes.exe

now go to the services console and start you dudes service. use dudesw to open a client console on your server and manage your dudes service... don't forget to enable secure connection to your dudes server so you can use your dudes client to access it from remote... log off your server, and dudes will still be running, monitoring everything.

enjoy


PROMOSI ONLINE !

Read More

Peer-to-Peer Traffic Marking

Untuk menjamin kualitas layanan untuk koneksi jaringan, lalu lintas jenis interaktif seperti VoIP dan HTTP harus diprioritaskan lebih dari non-interaktif, seperti ke-rekan-rekan jaringan lalu lintas. RouterOS QOS pelaksanaan menggunakan alat pelicin menandai berbagai jenis lalu lintas pertama, dan kemudian mereka ke tempat yang berbeda dengan batas antrian.

Berikut adalah contoh yang memaksa terjadinya P2P lalu lintas tidak akan memperoleh lebih dari 1Mbps dari total kapasitas link ketika link ini berisi banyak digunakan oleh lalu lintas otherwice lain untuk memperluas kapasitas penuh link
[admin@MikroTik] > /ip firewall mangle add chain=forward \
\... p2p=all-p2p action=mark-connection new-connection-mark=p2p_conn
[admin@MikroTik] > /ip firewall mangle add chain=forward \
\... connection-mark=p2p_conn action=mark-packet new-packet-mark=p2p
[admin@MikroTik] > /ip firewall mangle add chain=forward \
\... connection-mark=!p2p_conn action=mark-packet new-packet-mark=other

[admin@MikroTik] > /ip firewall mangle print
Flags: X - disabled, I - invalid, D - dynamic
0 chain=forward p2p=all-p2p action=mark-connection new-connection-mark=p2p_conn

1 chain=forward connection-mark=p2p_conn action=mark-packet new-packet-mark=p2p

2 chain=forward packet-mark=!p2p_conn action=mark-packet new-packet-mark=other
[admin@MikroTik] >
[admin@MikroTik] > /queue tree add parent=Public packet-mark=p2p limit-at=1000000 \
\... max-limit=100000000 priority=8
[admin@MikroTik] > /queue tree add parent=Local packet-mark=p2p limit-at=1000000 \
\... max-limit=100000000 priority=8
[admin@MikroTik] > /queue tree add parent=Public packet-mark=other limit-at=1000000 \
\... max-limit=100000000 priority=1
[admin@MikroTik] > /queue tree add parent=Local packet-mark=other limit-at=1000000 \
\... max-limit=100000000 priority=1

Mark by MAC address
Untuk menandai lalu lintas dari alamat MAC yang dikenal masuk ke router atau melalui itu, lakukan yang berikut
[admin@MikroTik] > / ip firewall mangle add chain=prerouting \
\... src-mac-address=00:01:29:60:36:E7 action=mark-connection new-connection-mark=known_mac_conn
[admin@MikroTik] > / ip firewall mangle add chain=prerouting \
\... connection-mark=known_mac_conn action=mark-packet new-packet-mark=known_mac
Change MSS
Ini merupakan kenyataan yang terkenal VPN link memiliki ukuran lebih kecil paket karena incapsulation overhead. Sebagian besar paket dengan MSS yang melebihi dari MSS VPN link harus pecah sebelum mengirimnya melalui jenis sambungan. Namun, jika paket DF bendera telah ditetapkan, maka tidak dapat pecah dan harus dibuang. Pada link yang rusak path MTU penemuan (PMTUD) dapat menyebabkan sejumlah masalah, termasuk masalah dengan FTP dan HTTP transfer data dan layanan e-mail.

Dalam kasus dengan link rusak PMTUD, penurunan dari MSS dari paket yang datang melalui link VPN dapat mengatasi masalah. Contoh berikut ini menunjukkan bagaimana untuk menurunkan nilai MSS melalui Mangle
[admin@MikroTik] > /ip firewall mangle add out-interface=pppoe-out \
\... protocol=tcp tcp-flags=syn action=change-mss new-mss=1300 chain=forward
[admin@MikroTik] > /ip firewall mangle print
Flags: X - disabled, I - invalid, D - dynamic
0 chain=forward out-interface=pppoe-out protocol=tcp tcp-flags=syn
action=change-mss new-mss=1300


PROMOSI ONLINE !

Read More