I need to track traffic in and out on our servers. I have a nagios plugin that monitors either 32 or 64 bit counters for ifXXOctets.
$in_octet_table = '220.127.116.11.18.104.22.168.1.10.'; $in_octet_table_64 = '22.214.171.124.126.96.36.199.1.1.6.';
$out_octet_table = '188.8.131.52.184.108.40.206.1.16.'; $out_octet_table_64 = '220.127.116.11.18.104.22.168.1.1.10.';
I threw it at one of our web servers, using the 64 bit oids, and I was surprised to discover that the server reports many more inbound octets than outbound. (I made sure I was querying the proper interface.)
This seems counter intuitive for a web server.
Our webservers are Centos 7 cloud servers in Rackspace Cloud.