Unusual amount of incoming traffic on eth0

smoker · 05-05-2010, 02:13 PM

Quote:

Originally Posted by svenito

I also found out that the company running the servers are having issues with their bandwidth monitoring software which may also be the cause of the unusual high traffic.

Always a thing to bear in mind. If they have forums, it's best to keep an eye out there too.

The place I hosted with ran MRTG based on the switch your machine was connected to, so any issues with the switch showed up in my graphs.

Not the best of arrangements, but it's cheap I guess.

svenito · 05-07-2010, 10:06 AM

I ran iptraf and noticed A LOT of traffic on UDP 53 mostly originating from within the subnet, or going to a machine in the subnet - I think somethings up with their network. Also connections on port 12000 and 13000 between machines that aren't mine.
the strange thing is, should I be seeing this traffic at all, as my iptables rules drop everything that isn't an allowed protocol, and UDP 53 or the 12000 or 13000 ports are not one of them?

Anyway, I have sent them a support ticket so I will just wait and see,

jschiwal · 05-09-2010, 06:48 AM

Moved: This thread is more suitable in Linux Security and has been moved accordingly to help your thread/question get the exposure it deserves.