LinuxQuestions.org
Welcome to the most active Linux Forum on the web.
Go Back   LinuxQuestions.org > Forums > Other *NIX Forums > Solaris / OpenSolaris
User Name
Password
Solaris / OpenSolaris This forum is for the discussion of Solaris and OpenSolaris.
General Sun, SunOS and Sparc related questions also go here.

Notices

Reply
 
Search this Thread
Old 09-17-2012, 03:13 AM   #1
ginda
Member
 
Registered: Mar 2004
Distribution: SUSE8.2, 9.2, Knoppix
Posts: 323

Rep: Reputation: 31
Help finding causes of high broadcast traffic on solaris


We have a solaris 10 server that had a period of high network broadcast traffic for some unknown reason a few week back, could someone please advise what I could check to find the cause

Thanks in advance
 
Old 09-17-2012, 07:58 AM   #2
tronayne
Senior Member
 
Registered: Oct 2003
Location: Northeastern Michigan, where Carhartt is a Designer Label
Distribution: Slackware 32- & 64-bit Stable
Posts: 3,042

Rep: Reputation: 761Reputation: 761Reputation: 761Reputation: 761Reputation: 761Reputation: 761Reputation: 761
You might want to start with the logs; messages, secure, syslog, access_log, error_log (those two from your Apache installation), possibly mail, cron and NTP (if you log it). Probably not going to find much from a few weeks ago but it might be worth a shot. Look though any other logs you may have while you're at it.

A good tool to install for monitoring network traffic is NTOP (http://www.ntop.org/). 'Course that would be after the horse already left the barn but for the future, eh? NTOP will show you graphically what's going on now (and what's been going on over time) that might point you in a direction.

If there's no records to look at and it only happened once and hasn't happened again, well, chalk it up to the ghosts in the machine -- but more likely a user being naughty or somebody trying to hack you, hopefully unsuccessfully.

Hope this helps some.
 
Old 09-17-2012, 09:24 AM   #3
ginda
Member
 
Registered: Mar 2004
Distribution: SUSE8.2, 9.2, Knoppix
Posts: 323

Original Poster
Rep: Reputation: 31
Thanks for your reply, i am not able to install any new tools such as dtrace or ntop. The issue is still happening, its basically high broadcast traffic. Need a way to identify what is causing the high traffic
 
Old 09-17-2012, 04:22 PM   #4
jlliagre
Moderator
 
Registered: Feb 2004
Location: Outside Paris
Distribution: Solaris10, Solaris 11, Mint, OL
Posts: 9,499

Rep: Reputation: 355Reputation: 355Reputation: 355Reputation: 355
Quote:
Originally Posted by ginda View Post
Thanks for your reply, i am not able to install any new tools such as dtrace or ntop.
dtrace is not a tool you need to install, it's part of the base OS.
Quote:
The issue is still happening, its basically high broadcast traffic. Need a way to identify what is causing the high traffic
How do you measure this high broadcast traffic and where ?

snoop is the basic Solaris tool to capture network traffic and start investigating it.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
Broadcast Traffic on Linux(FC-11) using iperf ubuntuv Linux - Networking 4 03-09-2012 11:22 AM
apache high cpu load on high traffic awww Linux - Newbie 9 10-04-2011 02:22 PM
Ignoring Broadcast traffic survient Linux - Networking 2 04-27-2011 08:23 AM
Swamped with NetBios Broadcast Traffic molybtek Linux - Networking 2 05-28-2009 09:37 PM
Network Traffic Stops After High Traffic windisch Linux - Networking 6 12-17-2007 05:45 PM


All times are GMT -5. The time now is 07:08 AM.

Main Menu
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration