I have a weird problem with traffic here. My server is connected via 100mbit to a netgear switch. Now sometimes when I look at the traffic on the server using iptraf it reports in excess of 16000kbytes/s, that is 16 MB/s on a 100mbit line. Clearly this can't be right, also the netgear switch can measure and display traffic, and it is reporting much lower traffic volumes, somewhere around 100kbytes/s.
After I noticed this I installed nethogs to see which process is sucking up all that bandwidth, but just like the switch, it showed almost no utilization at all. Can anybody explain this behavior?
The server is running Debian testing (3.2.0-1-amd64). The machine only has one network interface, eth0. Both iptraf and nethogs where watching this interface (and it is also the interface attached to the netgear switch.)