Jump to content

Otavio

Members
  • Posts

    1
  • Joined

  • Last visited

Posts posted by Otavio

  1. Hello i´ve been noticied a big use of outbound data from monitored servers. One in case run a simple webserver(webspeed) without connections and i could monitor it in focus.

    The use of link it´s big only for monitored machines. as you can see on below.

     #Src IPSrc PortDst IPDst PortProtocolSrc IfaceDst IfaceFlow TypeIPS CategoryExpiry (sec)Tx BytesdownArrow.gifRx BytesTx PktsRx PktsFlush
    110.0.1.41828969.191.244.2218292TCPX0X1 N/A89917738287101042490328617565791Delete entry
    210.0.0.1635060172.30.1.1065060UDPX0X1SIP ControlN/A29163727930445590Delete entry
    310.0.0.155406169.65.50.4443TCPX0X1HTTPSN/A89613574159122795882385433905Delete entry
    410.0.0.235203469.65.50.5443TCPX0X1HTTPSN/A897988890779919233291832225Delete entry
    510.0.0.17470569.65.50.4443TCPX0X1HTTPSN/A894680821461312521413616866Delete entry
    610.0.0.305121169.65.50.6443TCPX0X1HTTPSN/A895593606553313511044414720Delete entry
    710.0.0.186154669.65.50.4443TCPX0X1HTTPSN/A89644157823983527778411014

    the servers of line 3,4,5,6,7 and another with i reset the service was been there too.

    looking for conexion IP(69.65.50.4 , 5, 6 ) it´s from servernap.net.

    Based on this, what is this?
    What data the servers are sending that use all of my link?
    Someone can explain me?

    Thanks

×
×
  • Create New...