Re: [Xen-users] Incorrect Network Traffic

["Fajar A. Nugraha" <fajar@xxxxxxxxx>]

On Fri, Sep 25, 2009 at 5:12 AM, Kashif Ali <kashif_quaidian@xxxxxxxxxxx> wrote:
> # ifconfig eth0
> eth0      Link encap:Ethernet  HWaddr 00:16:3E:04:19:F3
>           inet addr:  Bcast:69.73.151.255  Mask:255.0.0.0
>           UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
>           RX packets:73317949 errors:0 dropped:0 overruns:0 frame:0

> From where correct traffic states can be found? Please advise am i missing
> something or is there any settings/changes required in xen scripts?

If you're using public IP address and getting high RX packet count
then most likely you're being flooded. Probably from virus or malware
on that network. Try runnning "iftop -n -i eth0", which can show which
IP address uses most bandwidth. Once you have that, you can go into
details and see what kind of traffic it is using tcpdump.

-- 
Fajar

_______________________________________________
Xen-users mailing list
Xen-users@xxxxxxxxxxxxxxxxxxx
http://lists.xensource.com/xen-users