This has been driving me nuts but my server has been using a highly excessive amount of bandwidth for the last two months, and I can't figure out how/why/where.
This month, for example, it's used 210 Gb download traffic (inbound to the server), but I can't figure out where it's going - the disk usage isn't going up (and the server only has a 20Gb drive anyway), and the upload (outbound) traffic was only 4 Gb for the month.
My logs don't show any unusual Apache, Ftp, Smtp or authentication activity in the logs; I am running a Quassel and an IRC server, but I would've figured that for all the data that'd be inbound to the server, there'd be an approximately equal amount outbound for those kinds of processes. I also have MySQL running, and that gets accessed by one user (from a script) from a remote server, but since the only instructions the script executes is for creating entries, I'd expect my disk usage to go up proportional to the inbound traffic if this were the cause. I haven't started shutting down processes to try and eliminate the problem because, apart from FTP and Quassel, all of these services are being used by other people, so their uptime is semi-critical.
Does anyone have any ideas what might be causing this, and any daemon or program I can use to log traffic totals on a per-process basis (for Ubuntu 10.04 Server x86_64)?