BW usage troubleshooting

Mast · #1 (**permalink**) 07-01-2009, 01:28 PM

Hello,
from several days i'm noticing a extremely high download bandwidth on my internet connection but i have no idea how to find WHAT is going on as right now there are no easy-to-see facilites for instant "who's using how much bw" in realtime.

The inbound BW does not relate to the internal network BW as it's almost idle, packet filters doesn't shows anything(the screen remains grey, nothing scrolls), IPS shows sporadic ICMP floods, SSH is closed

if i reset the box, it solves it for one day, then returns.

how do i find out who's using how much bw in realtime now?

andyk007 · #2 (**permalink**) 07-01-2009, 01:57 PM

hi you can logon to ssh and try following command:

iftop -i ethx

instead of ethx you can use each interface which is listed in ifconfig

with iftop --help you can see all attributes to monitor the bandwith in different views

Greetings
Andreas

BAlfson · #3 (**permalink**) 07-01-2009, 03:49 PM

I suggest you try restoring a backup from before this problem started.

Last year, I made some configuration changes, and, after a day or two, my external interface started relaying port 80 traffic from Chinese webservers. Restoring a backup from a week earlier solved the problem. I restored a backup from after the trouble started, and the problem came back, so I restored again from a week before and haven't had this problem since.

Cheers - Bob