I need to track traffic in and out on our servers. I have a nagios plugin that monitors either 32 or 64 bit counters for ifXXOctets.
$in_octet_table = '18.104.22.168.22.214.171.124.1.10.'; $in_octet_table_64 = '126.96.36.199.188.8.131.52.1.1.6.';
$out_octet_table = '184.108.40.206.220.127.116.11.1.16.'; $out_octet_table_64 = '18.104.22.168.22.214.171.124.1.1.10.';
I threw it at one of our web servers, using the 64 bit oids, and I was surprised to discover that the server reports many more inbound octets than outbound. (I made sure I was querying the proper interface.)
This seems counter intuitive for a web server.
Our webservers are Centos 7 cloud servers in Rackspace Cloud.