The tag has no usage guidance.

learn more… | top users | synonyms

0
votes
0answers
10 views

Is IP range or vLAN traffic mirroring possible with Linux?

I am dealing with a network monitoring issue in a medium size hosting platform (10 Gb). Some of the network devices can only do 1-2 SPAN ports. In order to get some more flexibility I'd like to use a ...
0
votes
0answers
21 views

high outgoing traffic on WAN port, but small trafic on LAN port in ZyXEL router

I have VPN with two routers (ZyXEL) connecter in different places. It worked fine until yesterday, both routers have high outgoing traffic (maximum from provider). In Port statistics I can see, that ...
0
votes
0answers
7 views

What could be causing traffic with URL parameters rotated by a caesar cipher? [duplicate]

Customers coming into our website from our newsletter go through an email tracker through a url like: https://www.domain.com/email/tracking?u=https%3N%2S%2Swww.domain.com&e=aA-bB_cC Where url ...
6
votes
2answers
1k views

Mirroring Traffic with Nginx

I need to duplicate/mirror the traffic comming to my server/resource. I mean, I have server A and B and N (nginx) as webserver. All the traffic comming to N/resource --> redirect to both A and B Is ...
-2
votes
2answers
28 views

How the Traffic Classes get defined

I often come across in networking related literature the term 'traffic class'. And it looks like it is platform specific, sometimes they talk about 8 traffic classes, sometimes about 64. 1) Is this ...
0
votes
0answers
42 views

Diagnosing high Network Out (Bytes) by MySQL instance

I have an EC2 instance (r3.xlarge) with only MySQL running on it. At some points in time, this machine sends a sustained amount of information (at almost a rate of 400Mbps) for about an hour or more ...
1
vote
1answer
17 views

limited connectivity at end nodes

I am running a campus wide network of a University and experienced a very unusual scenario for my network. The problem is two folds and therefore i would like to explain that separately after briefly ...
1
vote
1answer
59 views

Prioritize traffic going to different interfaces

For example, we have regular clients sitting on wlan1 and Bittorrent client sitting on eth2. They access Internet via eth1. Bittorrent download traffic should be given lowest priority. So, that ...
0
votes
1answer
1k views

IPtables Traffic Quota - up and down

I've been trying to set up traffic quotas for users on a shared server and i believe [with my limited knowledge] that iptables --quota and ports which have been selected for each user [--dport] is the ...
1
vote
1answer
58 views

Getting heavy traffic from random IP addresses

Digital ocean closed my droplet dude to have traffic on droplet. I made a new droplet(instance) and I am facing the same issue again. My nginx access.log is full of random ip address trying to make ...
1
vote
2answers
40 views

Routing multiple servers' traffic over another

I have multiple servers (both Windows and Linux) running in different locations. I would like to be able to route all the traffic of those (100mbit) servers over a 1gig connection in a different ...
0
votes
0answers
40 views

How to purge roaming credentials from AD user objects?

Background Due to low-budget constraints we are using roaming credentials instead of smart cards in our environment. Problem Now we have recognized that the relevant AD user attributes became ...
0
votes
1answer
14 views

how can I identify network traffic that is blocked?

I have an app that is waiting for a reply from a website but never continues. A browser page connects to the site fine so I think traffic is being blocked by something but I get no indications. I set ...
0
votes
2answers
49 views

Server slow, but plenty of CPU & RAM

My site has gone from getting 20,000 visits/day, to 182,000 yesterday, due to being featured on a number of popular sites. The site has become somewhat unresponsive. Many requests will lead to a ...
0
votes
0answers
42 views

Xen bridge - block traffic from port range - iptables / ebtables

I use Xen with bridge interface : - eth0 - viifbr0 - Name of VM interface : vifv10XX.0 Do you know if it is possible to block output traffic from source port range for a domU please ? If yes, can ...
0
votes
0answers
7 views

OpenVPN Client - Access Services

I have an OpenVPN client which currently forwards all packets to the OpenVPN server (as described here). I have a service running on this client, though, (Remote Desktop). I don't want requests to ...
0
votes
3answers
59 views

Are some SSL certificates able to handle more traffic?

I had a free SSL certificate that was working fine when my site had lower traffic - but the traffic has increased, and now users frequently receive errors establishing a secure connection. Some of ...
0
votes
0answers
12 views

When are AWS VPC logs restarted?

If I have AWS VPC Flow logs enabled. I can execute the command aws logs get-log-events --log-group-name <log-group> --log-stream-name <stream> --region us-west-2 And it spits out the ...
0
votes
1answer
65 views

Ubuntu server close connections unexpectedly after multiple downloads

When I connected to Ubuntu server via SSH connection and run script which downloads a lot of images, its quitting ssh connection after few seconds with error: "Write failed: Broken pipe". Then I can ...
1
vote
2answers
2k views

KVM: All network traffic to one guest (firewall)

I am currently using a VMWare ESXi 5.5 server for my virtualisation. The network setup is like this: PFSense firewall is the center of it all and connected to: LAN Network (physical NIC 1 assigned by ...
0
votes
0answers
246 views

How can I create routes between two separate LANs

I have a ASUS RT-AC66U with merlin firmware, how can i create a connection between 2 different subnets, whitout using Vlan's ? My Server subnet is 10.10.1.0 255.0.0.0.0 Asus router and client ...
1
vote
1answer
109 views

OpenVPN: Traffic Redirection not Working

tl;dr (after hours of debugging with @krisFR): At least under Debian 8, never use virtual interfaces (eth0:1) for OpenVPN, instead apply the new debian iproute2 methods (manual approach) described ...
4
votes
1answer
568 views

Elasticsearch: High traffic on loopback interface

One of our application uses Elasticsearch (1.4.4) as an in-memory cache. The application is a Java webapp deployed on Tomcat 7 with Oracle 1.7. The elasticsearch instance is a one-node setup deployed ...
21
votes
5answers
31k views

how i can identify which process is making UDP traffic on linux?

my machine is continously making udp dns traffic request. what i need to know is the PID of the process generating this traffic. The normal way in TCP connection is to use netstat/lsof and get the ...
0
votes
2answers
200 views

Transatlantic Ping respond times [closed]

Not sure if this the the right place to ask the question. But has anyone had any experience with ping response times or knows of an good to average response time for transatlantic traffic? we have an ...
0
votes
1answer
220 views

What's the catch for unlimited bandwidth for VPS? [closed]

I need to choose some VPS packages, so I started to google a lot of VPS companies. Typically, a VPS package should have a limited bandwidth(or say traffic, data transfer), such as 2TB, 3TB, etc. Then ...
3
votes
0answers
265 views

How do iptables work with NFQ in terms of traffic shaping in snort?

I'm trying to understand how iptables and NFQ work together with snort. The reason that I ask this is because from what I understand snort can be set to IPS via NFQ but if you have iptables there ...
-1
votes
1answer
63 views

Random spikes of high ingress traffic. What could be the cause? [closed]

I understand that this is rather a generic question but wanted to see if you all could offer some good feedback. Our business has three locations, one in the West Coast, two in the East Coast. Our ...
-2
votes
1answer
35 views

Logging traffic in a file? [closed]

today I'm looking for a tool that allows me to log any traffic that goes in and out. It would be perfect if it would store that data in text files on the server. Does anyone have a tool like this? ...
0
votes
0answers
183 views

Using net_cls with tc to shape ingress

I've successfully set up egress shaping using tc and net_cls, but am having a lot of trouble doing the same for ingress. I've tried using the basic tc ingress qdisc with a filter as well as using IFB ...
0
votes
1answer
120 views

Traffic shaping linux upload issue

Im currently working on a traffic shaping in linux. We have a client connected to a server running nat and dhcp. What we want to do is limit both the upload and download speed of the client/clients. ...
0
votes
0answers
297 views

MySQL production server experiencing high traffic from debian-sys-maint user

I am running a MySQL server on Debian 7 in a production environment. I recently (more or less accidentally) took a look into the server stats that can be shown in phpMyAdmin. I saw that the MySQL ...
0
votes
1answer
918 views

Getting lots of traffic from russia to an unpublished site

I am currently building a website. Currently nobody knows about it but it is already reachable for testing purposes. Now I saw, that I get a lot of traffic from russia (Its a german website hosted on ...
1
vote
1answer
50 views

How increase classes in HTB? [closed]

I am trying to setup a traffic shaping by HTB and tc. I have 70,000 users and I want to control the bandwidth of each user, so I create 70000 classes, and assign each ip address to a class by ip ...
2
votes
2answers
87 views

Is this reverse proxy configuration possible

I will first try to describe the problem I have. Let's say I have two different http servers running on two different ports behind firewall on my local machine: SERVER1: http://localhost:8001 ...
0
votes
1answer
54 views

Apache Load Balancing And Network traffic Flow

I am using apache load balancing to load balance web requests to various other nodes, the problem I am having is during uploads and downloads, all the traffic is also being routed through my load ...
32
votes
4answers
124k views

How to filter http traffic in Wireshark?

I suspect my server has a huge load of http requests from its clients. I want to measure the volume of http traffic. How can I do it with Wireshark? Or probably there is an alternative solution using ...
3
votes
4answers
4k views

How do I get the number of (currently) established TCP connections for a specific port?

How do I get the number of (currently) established TCP connections for a specific port? I have managed to get counters for traffic working by doing i.e for outgoing RTMP. iptables -N $CHAIN ...
-2
votes
1answer
76 views

How to monitor Windows Server process Internet activity? [closed]

Does anyone know a good tool for Windows Servers that would show breakdown of Internet traffic by processes and users? I know there are many Microsoft tools (such as process explorer) but does ...
0
votes
1answer
141 views

Monitor ppp0 traffic usage with Linux

Hey I'm developing a 3G connected device with a raspberry Pi. My mobile provider allows me to use 50 MB/month. This device will be installed somewhere nobody can have physically access to. My concern ...
0
votes
4answers
3k views

Meaning of numbers on Watchguard Traffic Monitor

When looking at Traffic Monitor, you will see columns of numbers. However not all of them are apparent on what they are for. Unfortunately I don't have enough reputation to post images but I'll try ...
2
votes
2answers
15k views

How to route network traffic of a host via another host?

I'm not the System Administrator of our corporate network, but I've got two Linux workstations (hosts A and B) with root access to both. Both hosts can see each other fine (ssh, ping, etc works from ...
1
vote
0answers
98 views

Redirect Default Gateway Traffic in Linux to File

I am trying to troubleshoot one of my linux servers (ubuntu server). Therefore I want to intercept all traffic that is sent to the default gateway and then write it to a file: preferably some kind of ...
-2
votes
2answers
60 views

How much traffic does a Ubuntu server cause for updates? [closed]

Does anybody have some numbers on how much traffic/month a ubuntu server causes if automatic updates are enabled (just for fetching the apt sources and the packages)? I have a small box which is ...
1
vote
1answer
5k views

How to route only specific openVPN traffic through a openVPN based on IP filtering of the destination? [closed]

I noticed a DNS proxy service I saw utilizes openvpn and tunnels supposedly only DNS traffic through the VPN which masks the users of the VPN's geolocation and allows the users system to use their ...
3
votes
2answers
812 views

Traffic redirecting with linux? (Man in the middle)

I have got the following scenario: I have a Linux box with two NICs and all network traffic comes in trough one NIC and goes out to the other one. So basically I'm already the man in the middle. But ...
0
votes
1answer
31 views

what does JYADXW mean as a HTTP verb?

Some jerk attacked my server, and I was reading the logs, when I saw "JYADXW" where the HTTP verb GET/POST/OPTIONS normally reside. What is this request? what does it mean? malicious IP Here - - ...
0
votes
0answers
226 views

Inbound traffic equals outbound traffic

I'm trying to monitor inbound and outbound traffic using Cacti on Ubuntu Server 14.04.1. I've got it up and running, but the reported data is wrong. When I run 'ifconfig' I get the following: lo ...
0
votes
1answer
326 views

Network traffic simulation with one computer

I have a Linux box with a gigabit Ethernet interface in a local network. With this single computer, I need to simulate HTTP traffic like if it was coming from 20 machines (hence with 20 different IP ...
0
votes
1answer
87 views

Iptables and counters

I'm trying to use iptables counters with munin to monitor traffic of hosts on my local subnet. For each host I set up a rule like this: iptables -I OUTPUT -d $ip This should count the packets going ...