Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I noticed a trange outgoing traffic in my dedicated server. I'd like to know how could I find out what is the reason to this.

One day traffic One day traffic One week traffic

One week traffic

As you can see, there are bursts of spikes to over 20 megs of outgoing traffic. There is always a lower of outgoing data, before the burst.

Is there any command I could use to know with application is causing this?

Sorry I couldn't express using the best form.

share|improve this question
How is this strange traffic? Looks quite normal to me. – mailq Nov 27 '11 at 12:16
not its not normal. It wasnt like that some time ago. – valter Nov 27 '11 at 12:49

That looks pretty normal to me. Perhaps you can show us the graphs where it was looking different? Your bandwidth levels are never going to form a perfect line in the graph. If your server was compromised, I'd expect to be seeing a large amount of bandwidth being used all the time.

How is this data being collected? Is it via SNMP? If you're getting this data through something that only supports 32bit counters, the noise you are seeing could just be the counters overflowing, and your graphing software not handling it correctly. Upgrading to something that supports 64bit counters might help.

share|improve this answer

Try using


It provides process specific network usage.

After that you can use jnettop of Iftop to monitor that which type of connections are making huge amount of traffic on network.

For Detailed analysis of network trqffic with Graphing and realtime update, with historical data representation, you can use two utilities:



share|improve this answer

iftop is a nice tool to watch online your top talkers. Perhaps that will give you an idea.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.