I have a VPS running CentOS Linux 5.x, with Kloxo server management software.
I kept everything as close to default as possible. I created NS records with my domain name provider, and successfully pointed those NS records to my VPS. Using kloxo I got my domain working for web (Apache) and email (Qmail).
The first problem I noticed was a constant stream of outgoing data from the server, 3-5 Megabits/second. This turned out to be because of open DNS recursion. I disabled recursion on my server (named.conf file), and the problem was greatly reduced - however, I am still seeing a constant, continuous inflow/outflow of data, at about 100kbit/sec in and 350-400 kilobits/second out.
Much better than I was seeing before, but still not satisfactory. I want to shut down this stream, but I can't track down its cause.
What I have tried:
- I shut down HTTP through Kloxo, it made no difference. This server does not get any real web traffic anyway so I don't think that's the cause.
I installed several apps:
IpTraf - this one does not seem to recognize my virtual NIC, "venet0"
nethogs - this one only shows about 0.5 Kilobytes/sec outgoing....it is not "seeing" the much larger outgoing traffic
vnstat - when I run the following command:
vnstat -i venet0 -l, I see a constant inflow (rx) of about 100 kilobits/second, and a constant outflow of about 350-400 kilobits/second, but I do not know what application/service is causing this
tcpdump -w LogFile.txtsuccessfully imported the log into WireShark, but I don't have enough network admin expertise to ascertain the source of my incoming/outgoing traffic problem.
Can anyone point me in the right direction on this one? I am hoping to get help on how to track down what's causing the issue, as well as maybe some ideas of the "most common" things to look for which might be causing this in a typical Kloxo default setup.