Dear Members,
I have got a server which normally does 1Mbit (95%) on a monthly basis.
Since a few days cacti measures peaks up to 80 Mbit. These peaks take 15min-1hour and about 10 times a day.
I looked into all logs, but unfortunately I'm not able to find where this is coming from.
Is there any tool which logs datatraffic per IP adres? Or something else which can help me to figure out what is happening?
The box does not seem to be hacked. I checked this with multiple tools such as rkhunter.
Thank you!!
Steven
I have got a server which normally does 1Mbit (95%) on a monthly basis.
Since a few days cacti measures peaks up to 80 Mbit. These peaks take 15min-1hour and about 10 times a day.
I looked into all logs, but unfortunately I'm not able to find where this is coming from.
Is there any tool which logs datatraffic per IP adres? Or something else which can help me to figure out what is happening?
The box does not seem to be hacked. I checked this with multiple tools such as rkhunter.
Thank you!!
Steven
