Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I noticed a trange outgoing traffic in my dedicated server. I'd like to know how could I find out what is the reason to this.

One day traffic One day traffic One week traffic

One week traffic

As you can see, there are bursts of spikes to over 20 megs of outgoing traffic. There is always a lower of outgoing data, before the burst.

Is there any command I could use to know with application is causing this?

Sorry I couldn't express using the best form.

share|improve this question
1  
How is this strange traffic? Looks quite normal to me. –  mailq Nov 27 '11 at 12:16
    
not its not normal. It wasnt like that some time ago. –  valter Nov 27 '11 at 12:49
add comment

3 Answers

That looks pretty normal to me. Perhaps you can show us the graphs where it was looking different? Your bandwidth levels are never going to form a perfect line in the graph. If your server was compromised, I'd expect to be seeing a large amount of bandwidth being used all the time.

How is this data being collected? Is it via SNMP? If you're getting this data through something that only supports 32bit counters, the noise you are seeing could just be the counters overflowing, and your graphing software not handling it correctly. Upgrading to something that supports 64bit counters might help.

share|improve this answer
add comment

Try using

NETHOGS

It provides process specific network usage.

After that you can use jnettop of Iftop to monitor that which type of connections are making huge amount of traffic on network.

For Detailed analysis of network trqffic with Graphing and realtime update, with historical data representation, you can use two utilities:

NTOP

IPAUDIT

share|improve this answer
add comment

iftop is a nice tool to watch online your top talkers. Perhaps that will give you an idea.

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.