I noticed a trange outgoing traffic in my dedicated server. I'd like to know how could I find out what is the reason to this.

One day traffic One day traffic One week traffic

One week traffic

As you can see, there are bursts of spikes to over 20 megs of outgoing traffic. There is always a lower of outgoing data, before the burst.

Is there any command I could use to know with application is causing this?

Sorry I couldn't express using the best form.

  • 1
    How is this strange traffic? Looks quite normal to me. – mailq Nov 27 '11 at 12:16
  • not its not normal. It wasnt like that some time ago. – valter Nov 27 '11 at 12:49

That looks pretty normal to me. Perhaps you can show us the graphs where it was looking different? Your bandwidth levels are never going to form a perfect line in the graph. If your server was compromised, I'd expect to be seeing a large amount of bandwidth being used all the time.

How is this data being collected? Is it via SNMP? If you're getting this data through something that only supports 32bit counters, the noise you are seeing could just be the counters overflowing, and your graphing software not handling it correctly. Upgrading to something that supports 64bit counters might help.


Try using


It provides process specific network usage.

After that you can use jnettop of Iftop to monitor that which type of connections are making huge amount of traffic on network.

For Detailed analysis of network trqffic with Graphing and realtime update, with historical data representation, you can use two utilities:




iftop is a nice tool to watch online your top talkers. Perhaps that will give you an idea.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.