Otavio Posted November 6, 2015 Posted November 6, 2015 Hello i´ve been noticied a big use of outbound data from monitored servers. One in case run a simple webserver(webspeed) without connections and i could monitor it in focus.The use of link it´s big only for monitored machines. as you can see on below. #Src IPSrc PortDst IPDst PortProtocolSrc IfaceDst IfaceFlow TypeIPS CategoryExpiry (sec)Tx BytesRx BytesTx PktsRx PktsFlush110.0.1.41828969.191.244.2218292TCPX0X1 N/A89917738287101042490328617565791210.0.0.1635060172.30.1.1065060UDPX0X1SIP ControlN/A29163727930445590310.0.0.155406169.65.50.4443TCPX0X1HTTPSN/A89613574159122795882385433905410.0.0.235203469.65.50.5443TCPX0X1HTTPSN/A897988890779919233291832225510.0.0.17470569.65.50.4443TCPX0X1HTTPSN/A894680821461312521413616866610.0.0.305121169.65.50.6443TCPX0X1HTTPSN/A895593606553313511044414720710.0.0.186154669.65.50.4443TCPX0X1HTTPSN/A89644157823983527778411014the servers of line 3,4,5,6,7 and another with i reset the service was been there too.looking for conexion IP(69.65.50.4 , 5, 6 ) it´s from servernap.net.Based on this, what is this?What data the servers are sending that use all of my link?Someone can explain me?Thanks
Staff Chris Posted November 8, 2015 Staff Posted November 8, 2015 Hi Otavio,The traffic seems low: 17738287 bytes (17.73MB), what values did you expect?Chris
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now