[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [Xen-users] Incorrect Network Traffic



On Fri, Sep 25, 2009 at 5:12 AM, Kashif Ali <kashif_quaidian@xxxxxxxxxxx> wrote:
> # ifconfig eth0
> eth0      Link encap:Ethernet  HWaddr 00:16:3E:04:19:F3
>           inet addr:  Bcast:69.73.151.255  Mask:255.0.0.0
>           UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
>           RX packets:73317949 errors:0 dropped:0 overruns:0 frame:0

> From where correct traffic states can be found? Please advise am i missing
> something or is there any settings/changes required in xen scripts?

If you're using public IP address and getting high RX packet count
then most likely you're being flooded. Probably from virus or malware
on that network. Try runnning "iftop -n -i eth0", which can show which
IP address uses most bandwidth. Once you have that, you can go into
details and see what kind of traffic it is using tcpdump.

-- 
Fajar

_______________________________________________
Xen-users mailing list
Xen-users@xxxxxxxxxxxxxxxxxxx
http://lists.xensource.com/xen-users


 


Rackspace

Lists.xenproject.org is hosted with RackSpace, monitoring our
servers 24x7x365 and backed by RackSpace's Fanatical Support®.