Questions tagged [network-traffic]
The network-traffic tag has no usage guidance.
103
questions
0
votes
0answers
38 views
Extremely high incoming traffic on web server but no abnormalities in log files
Today we recorded extremely high incoming traffic (1 Gbps) on our Debian Webserver (green chart). On an average day it's at a maximum of about 20-30 Mbps. Firewall as well as fail2ban are configured ...
0
votes
1answer
34 views
IN/OUT Network traffic not balanced on Nginx as reverse proxy
I have a reverse proxy server configured using Nginx and proxy_pass with https.
This graph is rendered using SNMPD installed on the server.
But send/receive network traffic is not balanced. Do you ...
0
votes
2answers
40 views
Http traffic using 127.0.0.1 or LAN IPv4 IP
Having two services exposed on the same machine, do my connections go to the router and back to my machine if I'm using my internal LAN IPv4 address?
If yes, Is it possible to prevent this by using ...
0
votes
0answers
36 views
Internet packages went crazy
So... I have a router (wireless, ASUS RT-N18U), connected to 4 pcs via cable and 1 tablet wireless.
After I noticed some performance drops in my network speed, I checked the traffic manager. The ...
0
votes
1answer
377 views
How to get size of HTTP request and response including protocol overhead?
I am working on an IoT-related research project with several devices. However, my project partner responsible for the infrastructure restricted the traffic for each device to a maximum of 500 MB per ...
0
votes
3answers
4k views
Linux ping command getting rtt
I am new to Linux and i am trying to ping a server and i wonder How to get or calculate median of Round Trip Time (RTT) n Linux ?
Ping or Packet Internet Groper is a network administration utility ...
0
votes
0answers
22 views
Configurable Stateful Traffic Generator Advice
I need a traffic generator tool which I should be able to configure followings;
Number of Packets
Number of Sessions
Number of TCP, UDP packets
Average number of packets in a session
Average packet ...
2
votes
2answers
624 views
Get network data transfer rate / throughput for use in Wireshark
I'm trying to get the ethernet NIC throughput rate / data transfer rate on a VPS in order to start a capture on Wireshark during DOS/DDOS attacks so I can analyze the nature of the packets.
I'm ...
0
votes
1answer
201 views
How to identify bursts of traffic?
Background: one of our Ubuntu servers is becoming randomly (?) unresponsive ie. some connections are dropped and the server is not accepting new ones for a while. At least this is what we see in logs ...
0
votes
0answers
27 views
How to display all network traffic of all local hosts
How can I display all network traffic of all hosts in my network? I can use a linux box of choice, can set eth0 to promiscuous mode and my router has all major protocols. I want to be able to tell ...
0
votes
1answer
20 views
discover additional scripts loaded from other sites when visiting a website with DNS
I noticed a (relatively) huge amount of dns packets in my wireshark recording while only visiting plain websites. Sites like amazon, facebook, comodoca and many others are requested by dns packets. So ...
-3
votes
1answer
19 views
Word translator tool tracing
If anyone (on our school wired network/Wi-fi) uses the Microsoft translator tool implemented in Word, would we be able to trace it or are we not able to see such activity going on in the network like ...
0
votes
1answer
31 views
NAT: Figuring out IP of broken down machine
I have a machine that was behind a natted router. Unfortunately its harddrive broke down, so I had to replace it. I have port 22 forwarded to it (in the router provided by the ISP) for remote ...
0
votes
0answers
97 views
Traffic burst in cascading Cisco switch configuration
I'm using 2 Cisco Catalyst 3850 switches (Sw1, Sw2) and 3 Cisco Nexus switches (Sw3, Sw4, Sw5) as part of my internal network, connected in the manner below (A, B, C, D, E, F represent 10G ports, i.e. ...
1
vote
0answers
387 views
Traffic Control on a Linux-bonded / LACP interface
I have created a virtual interface (VIF) [Read Linux Bonding / LACP interfaces] using two physical ethernet interfaces of 1GBps each.
When I apply traffic control on the same, I see that the egress ...
0
votes
0answers
136 views
Track down application/process causing computer broacasting destination 255.255.255.255 port 0
We have installed Untangle and we see many broadcasts from 1 IP (client Windows 7). Almost every minute it is broadcasting to 255.255.255.255 port 0.
I would like to know how to trace the source of ...
4
votes
0answers
824 views
Limiting incoming traffic with tc police
I have a requirement to limit the total incoming traffic to 5mbit. I know this can be achieved by using the following tc command:
tc filter add dev eth0 parent ffff: protocol ip u32 match u32 0 0 ...
4
votes
1answer
1k views
Why is the iptables byte count for raw PREROUTING 0?
I plan to use iptables to measure my Internet traffic (inspired by Peter Krumins' great article http://www.catonmat.net/blog/traffic-accounting-with-iptables).
The computer which is intended to ...
0
votes
2answers
187 views
reroute traffic from A going to B to instead go to C
I have TCP traffic from 192.168.3.51 going to 192.168.3.10 but instead I would like to have it sent to 192.168.3.50
Is there a way to set this up in iptables such that only tcp traffic coming from A ...
2
votes
2answers
1k views
Process names in MS Message Analyzer
I am trying to set up the Message Analyzer viewer exactly like it is explained in this reference, but instead of steady process names I got some weird numbers, both in ProcessName and ProcessID ...
1
vote
1answer
102 views
Extracting Source => Destination rx / tx from procfs (/proc)
I know I can get rx and tx bytes for each NIC from /proc/..., but I'm looking to get rx and tx info for each source => destination pair -- basically traffic info for each network connection.
In /proc/...
2
votes
1answer
615 views
Minimum bandwidth limit on Linux systems
I need to limit the minimum bandwith from an IP to specific services/ports, by dropping all the packets that will not satisfy that minimum rate.
I saw the attribute rate in the HTB class of the Linux ...
0
votes
2answers
758 views
What's the caculation for network speed reported with sar-n DEV output?
I am confused about the network speed outputs:
If the report says:
sar -n DEV 1 1
Linux 2.6.18-194.el5PAE (dev-db) 03/26/2011 _i686_ (8 CPU)
01:11:13 PM IFACE rxpck/s txpck/s ...
1
vote
0answers
587 views
iperf3 uses TCP even if UDP is specified
I've encountered this issue with iperf3(version 3.1.3). iperf(2.0.5) works different. So, with iperf3 even if I specify that I want to use UDP, when I start a capture on the destination, first thing I ...
-1
votes
1answer
91 views
What amount of inbound traffic is considered as normal for a small blog? [closed]
I have a blog that has ~1000 page views per day. Usually the amount of incoming traffic to the web server was less than 5MB. Suddenly it popped up to 300MB for some longer period of time. This is 60 ...
4
votes
2answers
419 views
Do you trust LACP?
Are there any reasons why I should not rely on LACP when designing network topology? I exactly mean L2 switch to hypervisor connection, so it is the place where agregated traffic of VMs cumulates. We ...
0
votes
1answer
60 views
Missing lots of ipv4 traffic after dns switch to a new server
I've been migrating a traffic-heavy (https://jsonip.com) service I've run for a number of years to an upgraded server over the last week. Before the dns switch, I was averaging 9mb/s ipv4 inbound. ...
0
votes
2answers
335 views
monitor traffic at the scale of millisecond
I have several linux servers running Ubuntu 14.04, and turned them into a Spark cluster. At this point, I want to measure the network flow between the servers, at the scale of milliseconds, in order ...
2
votes
3answers
11k views
How to setup a traffic limit per user on OpenVPN?
I am setting up a VPN server using OpenVPN. The authentication method is the certificate one (different certs for client and server). The VPS has 1TB of traffic monthly.
I plan allowing up to 4 ...
2
votes
0answers
94 views
Abnormal DHCP Android device traffic cannot be identified
Hi Serverfault community members.
I've been trying to identify the source of an abnormal broadcast traffic generated by some Samsung Android devices with no success, so I ask for your help.
I have ...
1
vote
0answers
106 views
How would I limit total outbound traffic?
I've had a look round and found solutions like tc to limit the total allowed bandwidth per user, but what I'm interested in is how to limit the total outbound traffic per user.
I have a server with ...
-2
votes
2answers
58 views
How the Traffic Classes get defined
I often come across in networking related literature the term 'traffic class'. And it looks like it is platform specific, sometimes they talk about 8 traffic classes, sometimes about 64.
1) Is this ...
1
vote
0answers
248 views
Network Traffic fluctuating, even with loopback
I am using iperf tool to benchmark my network interfaces on two identical machines (Dell Blade Server M620). Both have given different results.
On 1st machine, I ran server and clients as:
Server ==>...
6
votes
1answer
231 views
How to extract X.509 certificate from live network traffic automatically on Linux OS
I will appreciate if someone can point me How to extract an X.509 certificate from live network traffic automatically during the handshake phase between client and server on Linux OS.
A similar ...
7
votes
1answer
4k views
How to set up IAM Role Permissions for VPC CloudWatch logs?
I am trying to allow aws to start my log service, and I have my log streams, and log groups added already.
When i got to my VPC dashboard, the status of the Flow Log I'm interested in says:
Access ...
1
vote
2answers
2k views
OpenVPN solution/options for traffic reduction?
I am looking into VPN for the purpose of traffic reduction on the client side. CPU load is secondary.
Is lzo good enough to beat the overhead malus?
Are there other options to tune compression in ...
3
votes
2answers
349 views
Potential traffic issues on one big(ger) subnet
Posts like this:
Most traffic in a corporate LAN is client to server nowadays, and a
router not very well setup rather becomes a bottleneck AND a SPOF. and
200+ clients on a subnet wasn't a ...
0
votes
1answer
55 views
What are the tools needed to best asses a load balancer?
I'm building a Paas with Docker container in the field of Networkf Function Virtualization. I need to deploy some load-balancers inside containers.
I need to asses the load balancers in differents ...
0
votes
1answer
252 views
Random spikes of high ingress traffic. What could be the cause? [closed]
I understand that this is rather a generic question but wanted to see if you all could offer some good feedback.
Our business has three locations, one in the West Coast, two in the East Coast. Our ...
0
votes
1answer
1k views
HowTo: OpenWRT routing/tunneling all traffic through an inline Snort sensor
I want all traffic that hits the OpenWRT router redirecting/tunneling through a dedicated Snort/Suricata machine before it leaves the local network. The Snort/Suricata machine should act as an inline ...
1
vote
1answer
423 views
High suspicious traffic + connection slow and disconnecting on VPS
I have a problem with my VPS hosted by OVH in France: I have a high traffic. If I look at ifconfig it gives:
eth0 Link encap:Ethernet HWaddr XXXX
... ... ...
RX bytes:...
1
vote
2answers
307 views
Clients phone provider claiming high latency over UDP, how do I test?
A client of our uses a hosted phone solution for his 50 agent call centre. They use a hosted dialer who make the out going calls, once the connection is made the call is passed to my clients user ...
5
votes
1answer
478 views
Incredibly high peak of traffic (Network In) on AWS [closed]
I've found something extremely werid on my EC2 instance today; a peak on the "Network In" that goes beyond anything that had happened before, as you can see in the screenshot. Any idea about how to ...
0
votes
1answer
403 views
Spam Traffic, DDOS Attack & Server Crashing
I am running phpfox application in my server under my main domain name fetlock.com and I am getting large amount of spam and also suffering from DDOS attacks from multiple IP addresses. My server ...
-1
votes
2answers
737 views
Suspect traffic from 185.0.0.0/8 [closed]
I have a server/gateway running Debian 7. There is a big incoming traffic (for a homemade server) from an ip address located at 185.0.0.0/8 network for more than 40k packets in 24h. I have blocked all ...
0
votes
1answer
1k views
how to forward all traffic on specific interface to ip address
I have one Linux machine that have 2 interfaces. The first one is used as a default one and provides access to internet, the second interface was added as a dedicated link to send packets from tcpgen ...
3
votes
7answers
13k views
Is it possible to redirect/bounce TCP traffic to an external destination, based on rules?
I'm not even sure if this is possible...
Also, please forgive my ignorance on the subject.
What I'm looking for is for "something" that would allow me to redirect all TCP traffic arriving to host A ...
0
votes
1answer
666 views
network gateway can't see traffic for monitoring
I've just setup a new CentOS 6.4 machine to act as a default gateway for the LAN at head office. It's primary task is simply to route traffic to the appropriate place, ie VPN servers or the firewall ...
9
votes
4answers
39k views
How do I get the number of (currently) established TCP connections for a specific port?
How do I get the number of (currently) established TCP connections for a specific port?
I have managed to get counters for traffic working by doing i.e for outgoing RTMP.
iptables -N $CHAIN
...
2
votes
6answers
2k views
Wireshark Capture Between Two Routers
How would one go about capturing OSPF traffic in Wireshark between two routers?
I'm looking to do something like this:
[RTR A] - - - [LAPTOP] - - - [RTR B]
