Portal Home > Knowledgebase > Articles Database > how to track why my server use alot bandwidth now ?
how to track why my server use alot bandwidth now ?
Posted by ttgt, 10-16-2013, 01:22 PM |
Hi,
my cloudlinux/cpanel server only use about 2-5M/s only,
but it use about 15-20M/s now,
i go to whm's apache status to check,it seems the apache does not transfer alot bandwidth,
even i try to remove the 21 port,the bandwidth usage is still high,
is any way to check why my server use alot bandwidth now ?
thanx
|
Posted by kevincheri, 10-16-2013, 02:12 PM |
You have the Bandwidth usage stats in Cpanel>> Bandwidth , check through it and see whats causing the trouble. If its apache, check through the domain logs and see if its some sort of hot-linking.
|
Posted by AttackerNET, 10-17-2013, 01:16 AM |
Are you running a dns service on this machine? If so, Please make sure you have recursion limited or disabled to avoid being involved in a ddos attack which could cause this bandwidth over usage. Also, You can use a tool such as vnstat to differentiate inbound & outbound traffic.
|
Posted by Kailash12, 10-17-2013, 02:45 AM |
Install iftop and check the real time usage via SSH. That should help you to track the bandwidth usage.
|
Posted by Lee-RackSRV, 10-17-2013, 08:32 AM |
This would assume the traffic is all going to one/few host, which it may not be.
Assuming this is apache based traffic perhaps tail'ing the logs and assessing the servers logs may be the best course of action at the moment.
|
Posted by UH-Bobby, 10-17-2013, 09:35 AM |
I may be saying the same thing as you.
To the OP, you're looking at a bandwidth report from your provider I presume?The bandwidth report has only your server on it right? The reason I'm asking, let's say I have a physical server with several VPS's running on it, my bandwidth report would be for the physical host, with all those VPS's. If it's not something like that, then your best bet would be to check all the associated server. Make sure you're not spewing spam, or something like that.
|
Posted by khunj, 10-17-2013, 11:55 AM |
Did you check your network stats ?
|
Posted by xuid, 10-17-2013, 02:25 PM |
I would go with nettop. It should give you an idea what causing high bandwidth. If that's apache then mod_logio and webalizer should help you determine which host caused high bandwidth
|
Posted by datarealm, 10-17-2013, 05:23 PM |
Eyeball the sizes on your log files. With such a dramatic change, the cause should be evident from the size of the log data...
|
Posted by real_mc, 10-18-2013, 04:49 AM |
How come noone recommends tcpdump? It's the tool that anyone should be familiar with like we are with water.
@ttgt: If you'r server still uses more bandwidth than usual, then take a 1 minute traffic capture with tcpdump ( use -s0 to make sure you capture whole packets) and analyze that traffic. If you can't do the analysis, then do the capture anyway and ask someone on any forum to help you with. Make sure you do not provide it to anyone as it could contain password and you don't want that.
You can check the amount of packets for every destination port, packet length and so on with either tcpdump or wireshark (nice GUI that also builds graphics based on filters and filters can be done based on layer 4, 7 protocols).
Good luck.
Andrei
|
Add to Favourites Print this Article
Also Read