I am currently being attacked on one of my servers, but I am struggling to find out what could be causing it. I have had a few DDoS attacks before but this particular attack, which I'm not sure what it is, seems to be affecting the outgoing data from the server, instead of the incoming data.
Here is the outgoing data from the server (spikes are where the attack has begun):
Here is the incoming data to the server (which looks reasonably normal):
Are there any common vulnerabilities that might show this pattern and if so how can I patch against it?