LinuxQuestions.org
Share your knowledge at the LQ Wiki.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Newbie
User Name
Password
Linux - Newbie This Linux forum is for members that are new to Linux.
Just starting out and have a question? If it is not in the man pages or the how-to's this is the place!

Notices


Reply
  Search this Thread
Old 10-06-2009, 09:21 AM   #1
stoke city
LQ Newbie
 
Registered: Oct 2009
Posts: 16

Rep: Reputation: 0
new server built.....but uploading @ nearly 1Mbps without anything running !!


Hello,
I have built a server to provide my files needed for my satellite system. I built the server myself, and with some help from a friend i managed to install debian 5.0.3. The server has been running very well operating 24 hrs a day. I have noticed that the kids were complaining of a slow X box Live connection, so i had a look to see how much bandwidth my server was using, and i was shocked to see it was uploading @ 1Mbps !! This is allmost as fast as my IPS provides, so i am getting worried. I decided to stop the server from running by the terminal interface, but i am still uploading at very high speeds. I access my server by using vnc viewer, this allows me see the debian(gnome) desktop and control it from my xp machine. As far as i am concerned there is nothing at all running on the machine, and i have looked to see if i can find the problem, but i cannot. can anyone possibly help me find whats causing all the uploading ?? many Thanks from a new linux user..

Last edited by stoke city; 10-06-2009 at 04:00 PM.
 
Old 10-06-2009, 10:20 AM   #2
Tux-Slack
Member
 
Registered: Nov 2006
Location: Slovenia
Distribution: Slackware 13.37
Posts: 511

Rep: Reputation: 37
Run iftop -i <interface> to see current line status and to where the machine is sending data.
Replace <interface> with server actuall interface(eth0, eth1,... whichever you use)
 
Old 10-06-2009, 10:21 AM   #3
acid_kewpie
Moderator
 
Registered: Jun 2001
Location: UK
Distribution: Gentoo, RHEL, Fedora, Centos
Posts: 43,417

Rep: Reputation: 1976Reputation: 1976Reputation: 1976Reputation: 1976Reputation: 1976Reputation: 1976Reputation: 1976Reputation: 1976Reputation: 1976Reputation: 1976Reputation: 1976
run (possibly after installing) iptraf, which will show the network flows in and out of the box in a terminal. If it doesn't mean anything to you, show us the output.
 
Old 10-06-2009, 10:23 AM   #4
acid_kewpie
Moderator
 
Registered: Jun 2001
Location: UK
Distribution: Gentoo, RHEL, Fedora, Centos
Posts: 43,417

Rep: Reputation: 1976Reputation: 1976Reputation: 1976Reputation: 1976Reputation: 1976Reputation: 1976Reputation: 1976Reputation: 1976Reputation: 1976Reputation: 1976Reputation: 1976
actually, yeah iftop looks much better. use that instead. also use the "-P" option to include port numbers.

Last edited by acid_kewpie; 10-06-2009 at 10:25 AM.
 
Old 10-06-2009, 10:33 AM   #5
freelinuxtutorials
Member
 
Registered: Oct 2009
Posts: 70

Rep: Reputation: 21
yeah, iftop is nice for real time monitoring of rx/tx, you can also try bandwidthd if you want to display it in web and stored data in DB.
 
Old 10-06-2009, 11:03 AM   #6
never say never
Member
 
Registered: Sep 2009
Location: Indiana, USA
Distribution: SLES, SLED, OpenSuse, CentOS, ubuntu 10.10, OpenBSD, FreeBSD
Posts: 195

Rep: Reputation: 37
You don't say how things are set up, but here are a few basics that should help.

open a terminal session and run the following using either sudo or su to root.

netstat -p

This will show all connections and the process ID/program name of every process accessing the network from the server. If you aren't sure what process is guilty, since I don't know the details about your setup or your abilities it gets kind of complicated.

You can use ifconfig to find out your nics ID (something like eth0 and it won't be lo)

Then if you need to know what is using the network you can use tcpdump -i eth0 (use <ctrl> c to stop the output)

This will show the traffic and port info and at 1Mbps things will be flying by faster than you can read them, which you can use to identify the specific process using netstat -p above.

Now you should know the program and the port(s) so you can take the needed steps to stop the activity.

If this doesn't help please provide us more information about the setup and maybe output snippets from the above.

If your server is doing routing and or NAT (Network Address Translation) that will change things a bit, but these tools can still lead you to the source of the traffic.
 
Old 10-06-2009, 11:16 AM   #7
stoke city
LQ Newbie
 
Registered: Oct 2009
Posts: 16

Original Poster
Rep: Reputation: 0
Wow....so many people offering support...Thats fantastic !!! I shall try all of those suggestions, but i am a new user to linux, and it really is a bit too much to take in all at once..I shall try my best to provide you will the right information
 
Old 10-06-2009, 11:42 AM   #8
stoke city
LQ Newbie
 
Registered: Oct 2009
Posts: 16

Original Poster
Rep: Reputation: 0
Hello,
Please excuse me for being thick...I have opened a terminal and i enter netstat, this gives me a load if info i do not understand.....is there any thing in particualr i should be looking for ??
 
Old 10-06-2009, 11:55 AM   #9
acid_kewpie
Moderator
 
Registered: Jun 2001
Location: UK
Distribution: Gentoo, RHEL, Fedora, Centos
Posts: 43,417

Rep: Reputation: 1976Reputation: 1976Reputation: 1976Reputation: 1976Reputation: 1976Reputation: 1976Reputation: 1976Reputation: 1976Reputation: 1976Reputation: 1976Reputation: 1976
yeah, netstat info is useful for sure, but you'll be much better off with iftop for the immediate issue. iftop might not already be installed though, not sure if it is on debian, but I expect an "apt-get install iftop" will work fine as root to install it.
 
Old 10-06-2009, 12:08 PM   #10
stoke city
LQ Newbie
 
Registered: Oct 2009
Posts: 16

Original Poster
Rep: Reputation: 0
Quote:
Originally Posted by acid_kewpie View Post
yeah, netstat info is useful for sure, but you'll be much better off with iftop for the immediate issue. iftop might not already be installed though, not sure if it is on debian, but I expect an "apt-get install iftop" will work fine as root to install it.
Hello,
Can you possibly spare some time to explain to a noooob exacly how to do that ??? To me right now, i need to learn linux asap..but its all double dutch atm
 
Old 10-06-2009, 12:26 PM   #11
stoke city
LQ Newbie
 
Registered: Oct 2009
Posts: 16

Original Poster
Rep: Reputation: 0
Hello, i have managed to download & install iftop, but i am unsure what its supposed to be showing me......I get the OSD, but all it does is confirm to me that my server is exchanging large amounts of data.

Last edited by stoke city; 10-06-2009 at 04:01 PM.
 
Old 10-06-2009, 01:02 PM   #12
stoke city
LQ Newbie
 
Registered: Oct 2009
Posts: 16

Original Poster
Rep: Reputation: 0
Anyone ?? Please
 
Old 10-06-2009, 01:02 PM   #13
jmc1987
Member
 
Registered: Sep 2009
Location: Oklahoma
Distribution: Debian, CentOS, windows 7/10
Posts: 879

Rep: Reputation: 113Reputation: 113
Quote:
Originally Posted by stoke city View Post
Hello,
Can you possibly spare some time to explain to a noooob exacly how to do that ??? To me right now, i need to learn linux asap..but its all double dutch atm
Open up a Terminal and type
Code:
sudo aptitude install iftop
Its going to ask your for your password and just enter it then hit inter. It should install iftop.

Not sure if that what you was wanting explained but hope it helps.


By the way. Your not going to linux in a snap. It takes a little time. Lots of goodies here and there. But once you got it you have it.

Last edited by jmc1987; 10-06-2009 at 01:04 PM.
 
Old 10-06-2009, 01:31 PM   #14
acid_kewpie
Moderator
 
Registered: Jun 2001
Location: UK
Distribution: Gentoo, RHEL, Fedora, Centos
Posts: 43,417

Rep: Reputation: 1976Reputation: 1976Reputation: 1976Reputation: 1976Reputation: 1976Reputation: 1976Reputation: 1976Reputation: 1976Reputation: 1976Reputation: 1976Reputation: 1976
Ok, well as I said, add the -P option to add port numbers into the data to show if it's http traffic, ftp, smtp etc..., but there's only local traffic. What is 192.168.0.85? Assuming this machine only has one NIC and that's what we're seeing, there's really nothing going to the net at all. Make sure your kids are experiencing a rubbish connection at the time, and leave it running for a bit longer.

Last edited by acid_kewpie; 10-06-2009 at 01:33 PM.
 
Old 10-06-2009, 02:02 PM   #15
tredegar
LQ 5k Club
 
Registered: May 2003
Location: London, UK
Distribution: Debian "Jessie"
Posts: 6,087

Rep: Reputation: 407Reputation: 407Reputation: 407Reputation: 407Reputation: 407
Quote:
What is 192.168.0.85?
His router?
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
my wifi only has like 1Mbps sometimes ojasom Linux - Wireless Networking 4 11-30-2004 03:44 PM
server crashes when uploading ... lupus9537 Linux - Software 0 08-16-2004 05:14 PM
Uploading files to IMAP server ror Linux - Software 0 05-18-2004 05:26 AM
Apache Server Config, Mail Server, & Uploading johan the olive Linux - Networking 5 03-15-2003 12:42 AM
uploading file from the client to the server Bheki Linux - Newbie 2 06-11-2002 08:16 AM

LinuxQuestions.org > Forums > Linux Forums > Linux - Newbie

All times are GMT -5. The time now is 12:55 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration