Hi Friends,

I am using one online linux server in 1and1 provider.
Last month they charged $500 for bandwidth limit exceeded. But I checked all the logs There is no huge transfer as normal only. Bandwidth usage for the particular day is nearly 900Gb Data bandwidth used on the server. can any one tel me how to find the transfer file with ipaddress and need to proof os the that bandwidth usage. Regarding this any help please
Thanks

What logs did you check? Is thge 900Gb inbound or outbound traffic? Have you contacted your provider, they may have information on the source/destination addresses of the traffic.

Yes, I inform to provider but they didn't support. I had checked all ftp and http and ssh logs, But nothing found. Please suggest me.

Thanks

Check your messages log for anything unusual, check your secure log for brute force ssh/ftp access attempts.

If you've public facing DNS on that server then you may have been used to attempt a reflection attack which you probably won't notice unless you're logging all DNS queries.

However, if you DO find this traffic then you'll DEFFINATELY have to pay for it as it did go through your server.

You could try talking to your service provider and say that it was a one time occurance if it shows as a significant spike in your traffic pattern and see if they'll negotiate on the cost.

think of som monitoring system to don't get in to this trouble again . i use vnstat its just a really simple monitoring . it give your hourly daily monthly and live usage on different interfaces .

Hi Friends,

Can any one suggest me the best graphical bandwidth tool for linux. I am using centos5.

Thanks

this might be helpful :
http://www.thegeekstuff.com/2009/09/...itoring-tools/