Questions tagged [network-traffic]
The network-traffic tag has no usage guidance.
107
questions
0
votes
2answers
23 views
Http traffic using 127.0.0.1 or LAN IPv4 IP
Having two services exposed on the same machine, do my connections go to the router and back to my machine if I'm using my internal LAN IPv4 address?
If yes, Is it possible to prevent this by using ...
0
votes
0answers
34 views
Internet packages went crazy
So... I have a router (wireless, ASUS RT-N18U), connected to 4 pcs via cable and 1 tablet wireless.
After I noticed some performance drops in my network speed, I checked the traffic manager. The ...
0
votes
1answer
30 views
How to get size of HTTP request and response including protocol overhead?
I am working on an IoT-related research project with several devices. However, my project partner responsible for the infrastructure restricted the traffic for each device to a maximum of 500 MB per ...
0
votes
0answers
10 views
Amount of incoming and outgoing traffic is different on tunnel interface
I'm running Linux CentOS and are trying to understand some things.
I have a tunnel interface and only one single ip rule which directs all traffic from that interface to another server.
It seems ...
0
votes
0answers
127 views
DNS responses within ICMP Port Unreacheable packets
I am analyzing a traffic dump in which there are some standard DNS queries but their responses are in ICMP packets. The structure of these ICMP packets is;
IP->ICMP->IP->UDP->DNS(response)
say ...
0
votes
0answers
27 views
What's the most efficient way to capture vpc mirror traffic for a large set of devices?
I want to mirror north/south network traffic for assets within my aws vpc to a packet sniffing security appliance in the same vpc using Amazon's traffic mirroring feature.
I've got it to work with a ...
0
votes
0answers
19 views
Extracting useful httpd data from tcpflow
I use the following command
tcpflow -p -c port 80 | grep -B10 "Host: "
to monitor httpd traffic in my server. It's very useful, and it returns
something like this
193.169.254.005.50104-05.01.021....
0
votes
2answers
1k views
Linux ping command getting rtt
I am new to Linux and i am trying to ping a server and i wonder How to get or calculate median of Round Trip Time (RTT) n Linux ?
Ping or Packet Internet Groper is a network administration utility ...
0
votes
0answers
26 views
How can I test if a server in the network is traffic shaping?
I am having trouble passing some traffic between my server and another one.
I have no control over the other one.
How can I test if the other server is doing traffic shaping on specific ports?
My ...
0
votes
0answers
21 views
Configurable Stateful Traffic Generator Advice
I need a traffic generator tool which I should be able to configure followings;
Number of Packets
Number of Sessions
Number of TCP, UDP packets
Average number of packets in a session
Average packet ...
2
votes
2answers
181 views
Get network data transfer rate / throughput for use in Wireshark
I'm trying to get the ethernet NIC throughput rate / data transfer rate on a VPS in order to start a capture on Wireshark during DOS/DDOS attacks so I can analyze the nature of the packets.
I'm ...
0
votes
0answers
64 views
ingress/egress statistics per frontend in traefik or with aws standard features
I have a traefik proxy in front of a number of dockerized hosts a.host.tld, b.host.tld, c.host.tld, etc. all running on AWS. Each host is a "frontend" in traefik, and communicates with one or more ...
0
votes
1answer
125 views
How to identify bursts of traffic?
Background: one of our Ubuntu servers is becoming randomly (?) unresponsive ie. some connections are dropped and the server is not accepting new ones for a while. At least this is what we see in logs ...
0
votes
0answers
25 views
How to display all network traffic of all local hosts
How can I display all network traffic of all hosts in my network? I can use a linux box of choice, can set eth0 to promiscuous mode and my router has all major protocols. I want to be able to tell ...
0
votes
1answer
20 views
discover additional scripts loaded from other sites when visiting a website with DNS
I noticed a (relatively) huge amount of dns packets in my wireshark recording while only visiting plain websites. Sites like amazon, facebook, comodoca and many others are requested by dns packets. So ...
-3
votes
1answer
18 views
Word translator tool tracing
If anyone (on our school wired network/Wi-fi) uses the Microsoft translator tool implemented in Word, would we be able to trace it or are we not able to see such activity going on in the network like ...
0
votes
1answer
31 views
NAT: Figuring out IP of broken down machine
I have a machine that was behind a natted router. Unfortunately its harddrive broke down, so I had to replace it. I have port 22 forwarded to it (in the router provided by the ISP) for remote ...
0
votes
0answers
81 views
Traffic burst in cascading Cisco switch configuration
I'm using 2 Cisco Catalyst 3850 switches (Sw1, Sw2) and 3 Cisco Nexus switches (Sw3, Sw4, Sw5) as part of my internal network, connected in the manner below (A, B, C, D, E, F represent 10G ports, i.e. ...
1
vote
0answers
319 views
Traffic Control on a Linux-bonded / LACP interface
I have created a virtual interface (VIF) [Read Linux Bonding / LACP interfaces] using two physical ethernet interfaces of 1GBps each.
When I apply traffic control on the same, I see that the egress ...
0
votes
0answers
119 views
Track down application/process causing computer broacasting destination 255.255.255.255 port 0
We have installed Untangle and we see many broadcasts from 1 IP (client Windows 7). Almost every minute it is broadcasting to 255.255.255.255 port 0.
I would like to know how to trace the source of ...
3
votes
0answers
740 views
Limiting incoming traffic with tc police
I have a requirement to limit the total incoming traffic to 5mbit. I know this can be achieved by using the following tc command:
tc filter add dev eth0 parent ffff: protocol ip u32 match u32 0 0 ...
3
votes
1answer
544 views
Why is the iptables byte count for raw PREROUTING 0?
I plan to use iptables to measure my Internet traffic (inspired by Peter Krumins' great article http://www.catonmat.net/blog/traffic-accounting-with-iptables).
The computer which is intended to ...
0
votes
2answers
125 views
reroute traffic from A going to B to instead go to C
I have TCP traffic from 192.168.3.51 going to 192.168.3.10 but instead I would like to have it sent to 192.168.3.50
Is there a way to set this up in iptables such that only tcp traffic coming from A ...
2
votes
2answers
1k views
Process names in MS Message Analyzer
I am trying to set up the Message Analyzer viewer exactly like it is explained in this reference, but instead of steady process names I got some weird numbers, both in ProcessName and ProcessID ...
1
vote
1answer
94 views
Extracting Source => Destination rx / tx from procfs (/proc)
I know I can get rx and tx bytes for each NIC from /proc/..., but I'm looking to get rx and tx info for each source => destination pair -- basically traffic info for each network connection.
In /proc/...
2
votes
1answer
575 views
Minimum bandwidth limit on Linux systems
I need to limit the minimum bandwith from an IP to specific services/ports, by dropping all the packets that will not satisfy that minimum rate.
I saw the attribute rate in the HTB class of the Linux ...
0
votes
2answers
569 views
What's the caculation for network speed reported with sar-n DEV output?
I am confused about the network speed outputs:
If the report says:
sar -n DEV 1 1
Linux 2.6.18-194.el5PAE (dev-db) 03/26/2011 _i686_ (8 CPU)
01:11:13 PM IFACE rxpck/s txpck/s ...
1
vote
0answers
498 views
iperf3 uses TCP even if UDP is specified
I've encountered this issue with iperf3(version 3.1.3). iperf(2.0.5) works different. So, with iperf3 even if I specify that I want to use UDP, when I start a capture on the destination, first thing I ...
-1
votes
1answer
64 views
What amount of inbound traffic is considered as normal for a small blog? [closed]
I have a blog that has ~1000 page views per day. Usually the amount of incoming traffic to the web server was less than 5MB. Suddenly it popped up to 300MB for some longer period of time. This is 60 ...
4
votes
2answers
305 views
Do you trust LACP?
Are there any reasons why I should not rely on LACP when designing network topology? I exactly mean L2 switch to hypervisor connection, so it is the place where agregated traffic of VMs cumulates. We ...
0
votes
1answer
59 views
Missing lots of ipv4 traffic after dns switch to a new server
I've been migrating a traffic-heavy (https://jsonip.com) service I've run for a number of years to an upgraded server over the last week. Before the dns switch, I was averaging 9mb/s ipv4 inbound. ...
0
votes
2answers
261 views
monitor traffic at the scale of millisecond
I have several linux servers running Ubuntu 14.04, and turned them into a Spark cluster. At this point, I want to measure the network flow between the servers, at the scale of milliseconds, in order ...
0
votes
3answers
8k views
How to setup a traffic limit per user on OpenVPN?
I am setting up a VPN server using OpenVPN. The authentication method is the certificate one (different certs for client and server). The VPS has 1TB of traffic monthly.
I plan allowing up to 4 ...
2
votes
0answers
91 views
Abnormal DHCP Android device traffic cannot be identified
Hi Serverfault community members.
I've been trying to identify the source of an abnormal broadcast traffic generated by some Samsung Android devices with no success, so I ask for your help.
I have ...
1
vote
0answers
85 views
How would I limit total outbound traffic?
I've had a look round and found solutions like tc to limit the total allowed bandwidth per user, but what I'm interested in is how to limit the total outbound traffic per user.
I have a server with ...
-2
votes
2answers
47 views
How the Traffic Classes get defined
I often come across in networking related literature the term 'traffic class'. And it looks like it is platform specific, sometimes they talk about 8 traffic classes, sometimes about 64.
1) Is this ...
1
vote
0answers
197 views
Network Traffic fluctuating, even with loopback
I am using iperf tool to benchmark my network interfaces on two identical machines (Dell Blade Server M620). Both have given different results.
On 1st machine, I ran server and clients as:
Server ==>...
6
votes
1answer
184 views
How to extract X.509 certificate from live network traffic automatically on Linux OS
I will appreciate if someone can point me How to extract an X.509 certificate from live network traffic automatically during the handshake phase between client and server on Linux OS.
A similar ...
7
votes
1answer
4k views
How to set up IAM Role Permissions for VPC CloudWatch logs?
I am trying to allow aws to start my log service, and I have my log streams, and log groups added already.
When i got to my VPC dashboard, the status of the Flow Log I'm interested in says:
Access ...
1
vote
2answers
2k views
OpenVPN solution/options for traffic reduction?
I am looking into VPN for the purpose of traffic reduction on the client side. CPU load is secondary.
Is lzo good enough to beat the overhead malus?
Are there other options to tune compression in ...
3
votes
2answers
267 views
Potential traffic issues on one big(ger) subnet
Posts like this:
Most traffic in a corporate LAN is client to server nowadays, and a
router not very well setup rather becomes a bottleneck AND a SPOF. and
200+ clients on a subnet wasn't a ...
0
votes
1answer
55 views
What are the tools needed to best asses a load balancer?
I'm building a Paas with Docker container in the field of Networkf Function Virtualization. I need to deploy some load-balancers inside containers.
I need to asses the load balancers in differents ...
0
votes
1answer
238 views
Random spikes of high ingress traffic. What could be the cause? [closed]
I understand that this is rather a generic question but wanted to see if you all could offer some good feedback.
Our business has three locations, one in the West Coast, two in the East Coast. Our ...
0
votes
1answer
1k views
HowTo: OpenWRT routing/tunneling all traffic through an inline Snort sensor
I want all traffic that hits the OpenWRT router redirecting/ tunnelin through a dedicated Snort/Suricata machine, before it leaves the local network. The Snort/Suricata machine should act as an inline ...
1
vote
1answer
373 views
High suspicious traffic + connection slow and disconnecting on VPS
I have a problem with my VPS hosted by OVH in France: I have a high traffic. If I look at ifconfig it gives:
eth0 Link encap:Ethernet HWaddr XXXX
... ... ...
RX bytes:...
1
vote
2answers
247 views
Clients phone provider claiming high latency over UDP, how do I test?
A client of our uses a hosted phone solution for his 50 agent call centre. They use a hosted dialer who make the out going calls, once the connection is made the call is passed to my clients user ...
5
votes
1answer
468 views
Incredibly high peak of traffic (Network In) on AWS [closed]
I've found something extremely werid on my EC2 instance today; a peak on the "Network In" that goes beyond anything that had happened before, as you can see in the screenshot. Any idea about how to ...
0
votes
1answer
385 views
Spam Traffic, DDOS Attack & Server Crashing
I am running phpfox application in my server under my main domain name fetlock.com and I am getting large amount of spam and also suffering from DDOS attacks from multiple IP addresses. My server ...
-1
votes
2answers
591 views
Suspect traffic from 185.0.0.0/8 [closed]
I have a server/gateway running Debian 7. There is a big incoming traffic (for a homemade server) from an ip address located at 185.0.0.0/8 network for more than 40k packets in 24h. I have blocked all ...
0
votes
1answer
936 views
how to forward all traffic on specific interface to ip address
I have one Linux machine that have 2 interfaces. The first one is used as a default one and provides access to internet, the second interface was added as a dedicated link to send packets from tcpgen ...
