1

On a server a few KVM/libvirt virtual machines are running. Sometimes these use lots of GB in network bandwidth. I would like to do statistics on network transfers (bandwidth usage, ideally by IP address) in order to rule out foul play (e.g. data exfiltration or flood/DoS attacks).

Is there a way to collect bandwidth data on the KVM/libvirt hypervisor/host side?

The network is currently bridged (without NAT), each VM has its own IP address.

3
  • Each VM has a vnetX adapter on the host, you can see the ingress/egress counters there
    – dyasny
    May 7, 2018 at 13:09
  • @dyasny OK, how would I go about getting statistics (more than total bytes sent/received since last boot which I already have)?
    – Ned64
    May 7, 2018 at 21:20
  • iftop, nload, nethogs, iptraf, the list goes on and on really
    – dyasny
    May 8, 2018 at 1:07

0

You must log in to answer this question.