Hi,
Is this a bug? I have a couple of guest domains without any type network traffic
on them (no mysql,httpd,ftp etc). I just created them and started so there
should be no network traffic on them but i can see ifconfig (in dom0 against
vif) is showing a high usage of network traffic in just 24 hours of time. The
output of ifconfig is as under:
# ifconfig api_113
api_113 Link encap:Ethernet HWaddr FE:FF:FF:FF:FF:FF
inet6 addr: fe80::fcff:ffff:feff:ffff/64 Scope:Link
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:92 errors:0 dropped:0 overruns:0 frame:0
TX packets:73314769 errors:0 dropped:55304 overruns:0 carrier:0
collisions:0 txqueuelen:32
RX bytes:11338 (11.0 KiB) TX bytes:2513681692 (2.3 GiB)
# ifconfig test_160
test_160 Link encap:Ethernet HWaddr FE:FF:FF:FF:FF:FF
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:129410 errors:0 dropped:0 overruns:0 frame:0
TX packets:69180875 errors:0 dropped:24381 overruns:0 carrier:0
collisions:0 txqueuelen:32
RX bytes:14452219 (13.7 MiB) TX bytes:2708497500 (2.5 GiB)
I have checked the output of ifconfig after logining to these vps too and the
states are same almost. The output is as under as respective to above:
# ifconfig eth0
eth0 Link encap:Ethernet HWaddr 00:16:3E:04:19:F3
inet addr: Bcast:69.73.151.255 Mask:255.0.0.0
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:73317949 errors:0 dropped:0 overruns:0 frame:0
TX packets:92 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:2513892522 (2.3 GiB) TX bytes:12626 (12.3 KiB)
# ifconfig eth0
eth0 Link encap:Ethernet HWaddr 00:16:3E:03:92:20
inet addr:69.73.167.160 Bcast:69.255.255.255 Mask:255.0.0.0
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:69186339 errors:0 dropped:0 overruns:0 frame:0
TX packets:129458 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:2708865602 (2.5 GiB) TX bytes:16269222 (15.5 MiB)
I am running with xen-3.2.0 and kernel 2.6.18.8 from mercurial hg.
The network setting/configurations are default and i didnt did any custom
settings.
>From where correct traffic states can be found? Please advise am i missing
something or is there any settings/changes required in xen scripts?
Thanks in advance.
Regards,
Kashif
_________________________________________________________________
Bing™ brings you maps, menus, and reviews organized in one place. Try it now.
http://www.bing.com/search?q=restaurants&form=MLOGEN&publ=WLHMTAG&crea=TEXT_MLOGEN_Core_tagline_local_1x1
_______________________________________________
Xen-users mailing list
Xen-users@lists.xensource.com
http://lists.xensource.com/xen-users
On Fri, Sep 25, 2009 at 5:12 AM, Kashif Ali <kashif_quaidian@hotmail.com> wrote:> # ifconfig eth0 > eth0 Link encap:Ethernet HWaddr 00:16:3E:04:19:F3 > inet addr: Bcast:69.73.151.255 Mask:255.0.0.0 > UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 > RX packets:73317949 errors:0 dropped:0 overruns:0 frame:0> From where correct traffic states can be found? Please advise am i missing > something or is there any settings/changes required in xen scripts?If you''re using public IP address and getting high RX packet count then most likely you''re being flooded. Probably from virus or malware on that network. Try runnning "iftop -n -i eth0", which can show which IP address uses most bandwidth. Once you have that, you can go into details and see what kind of traffic it is using tcpdump. -- Fajar _______________________________________________ Xen-users mailing list Xen-users@lists.xensource.com http://lists.xensource.com/xen-users
Hi Fajar,
I have another guest domain and i have assigned no gateway to it for testing
purpose but it is still getting RX packets count as below:
[root@test ~]# ifconfig
eth0 Link encap:Ethernet HWaddr 00:16:3E:04:98:73
inet addr:69.73.167.239 Bcast:69.73.167.255 Mask:255.255.255.0
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:82002302 errors:0 dropped:0 overruns:0 frame:0
TX packets:585 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:46555178435 (43.3 GiB) TX bytes:24570 (23.9 KiB)
lo Link encap:Local Loopback
inet addr:127.0.0.1 Mask:255.0.0.0
UP LOOPBACK RUNNING MTU:16436 Metric:1
RX packets:0 errors:0 dropped:0 overruns:0 frame:0
TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:0 (0.0 b) TX bytes:0 (0.0 b)
[root@test ~]# ping yahoo.com
ping: unknown host yahoo.com
[root@test ~]# route
Kernel IP routing table
Destination Gateway Genmask Flags Metric Ref Use Iface
69.73.167.0 * 255.255.255.0 U 0 0 0 eth0
[root@test ~]# iftop -n -i eth0
-bash: iftop: command not found
[root@test ~]#
Advise please.
_________________________________________________________________
Hotmail® has ever-growing storage! Don’t worry about storage limits.
http://windowslive.com/Tutorial/Hotmail/Storage?ocid=TXT_TAGLM_WL_HM_Tutorial_Storage_062009
_______________________________________________
Xen-users mailing list
Xen-users@lists.xensource.com
http://lists.xensource.com/xen-users
Anyone around the globe? please guide me.
From: kashif_quaidian@hotmail.com
To: fajar@fajar.net
Subject: RE: [Xen-users] Incorrect Network Traffic
Date: Fri, 25 Sep 2009 15:19:50 +0000
CC: xen-users@lists.xensource.com
Hi Fajar,
I have another guest domain and i have assigned no gateway to it for testing
purpose but it is still getting RX packets count as below:
[root@test ~]# ifconfig
eth0 Link encap:Ethernet HWaddr 00:16:3E:04:98:73
inet addr:69.73.167.239 Bcast:69.73.167.255 Mask:255.255.255.0
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:82002302 errors:0 dropped:0 overruns:0 frame:0
TX packets:585 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:46555178435 (43.3 GiB) TX bytes:24570 (23.9 KiB)
lo Link encap:Local Loopback
inet addr:127.0.0.1 Mask:255.0.0.0
UP LOOPBACK RUNNING MTU:16436 Metric:1
RX packets:0 errors:0 dropped:0 overruns:0 frame:0
TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:0 (0.0 b) TX bytes:0 (0.0 b)
[root@test ~]# ping yahoo.com
ping: unknown host yahoo.com
[root@test ~]# route
Kernel IP routing table
Destination Gateway Genmask Flags Metric Ref Use Iface
69.73.167.0 * 255.255.255.0 U 0 0 0 eth0
[root@test ~]# iftop -n -i eth0
-bash: iftop: command not found
[root@test ~]#
Advise please.
Hotmail® has ever-growing storage! Don’t worry about storage limits. Check it
out.
_________________________________________________________________
Bing™ brings you maps, menus, and reviews organized in one place. Try it now.
http://www.bing.com/search?q=restaurants&form=MLOGEN&publ=WLHMTAG&crea=TEXT_MLOGEN_Core_tagline_local_1x1
_______________________________________________
Xen-users mailing list
Xen-users@lists.xensource.com
http://lists.xensource.com/xen-users
Hi Kashi, You''ve supplied little info so its hard for any one to debug. That ip addy your host is getting seems odd in that now a days NATing is a well used approach. I also see that IP belongs to vps.baladaspoa.com.br? Are you behind a firewall with NAT or right on the WAN? Did I miss previous posts because your email seems very vague. I''m ok at network stuff and don''t mind helping. - Brian On Sep 25, 2009, at 11:03 AM, Kashif Ali wrote:> Anyone around the globe? please guide me. > > > From: kashif_quaidian@hotmail.com > To: fajar@fajar.net > Subject: RE: [Xen-users] Incorrect Network Traffic > Date: Fri, 25 Sep 2009 15:19:50 +0000 > CC: xen-users@lists.xensource.com > > Hi Fajar, > > I have another guest domain and i have assigned no gateway to it for > testing purpose but it is still getting RX packets count as below: > > [root@test ~]# ifconfig > eth0 Link encap:Ethernet HWaddr 00:16:3E:04:98:73 > inet addr:69.73.167.239 Bcast:69.73.167.255 Mask: > 255.255.255.0 > UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 > RX packets:82002302 errors:0 dropped:0 overruns:0 frame:0 > TX packets:585 errors:0 dropped:0 overruns:0 carrier:0 > collisions:0 txqueuelen:1000 > RX bytes:46555178435 (43.3 GiB) TX bytes:24570 (23.9 KiB) > > lo Link encap:Local Loopback > inet addr:127.0.0.1 Mask:255.0.0.0 > UP LOOPBACK RUNNING MTU:16436 Metric:1 > RX packets:0 errors:0 dropped:0 overruns:0 frame:0 > TX packets:0 errors:0 dropped:0 overruns:0 carrier:0 > collisions:0 txqueuelen:0 > RX bytes:0 (0.0 b) TX bytes:0 (0.0 b) > > [root@test ~]# ping yahoo.com > ping: unknown host yahoo.com > [root@test ~]# route > Kernel IP routing table > Destination Gateway Genmask Flags Metric Ref > Use Iface > 69.73.167.0 * 255.255.255.0 U 0 > 0 0 eth0 > [root@test ~]# iftop -n -i eth0 > -bash: iftop: command not found > [root@test ~]# > > Advise please. > > > > > Hotmail® has ever-growing storage! Don’t worry about storage limits. > Check it out. > Bing™ brings you maps, menus, and reviews organized in one place. > Try it now. _______________________________________________ > Xen-users mailing list > Xen-users@lists.xensource.com > http://lists.xensource.com/xen-users_______________________________________________ Xen-users mailing list Xen-users@lists.xensource.com http://lists.xensource.com/xen-users
On Fri, Sep 25, 2009 at 10:19 PM, Kashif Ali <kashif_quaidian@hotmail.com> wrote:> Hi Fajar, > > I have another guest domain and i have assigned no gatewayIt doesn''t matter. If the culprit is on your local network then you don''t need a gateway to receive that much traffic.> [root@test ~]# iftop -n -i eth0 > -bash: iftop: command not foundInstall it (or whatever tools you like than can pinpoint which host uses most bandwidth to your server) http://ex-parrot.com/pdw/iftop/ http://dag.wieers.com/rpm/packages/iftop/ http://packages.debian.org/search?keywords=iftop -- Fajar _______________________________________________ Xen-users mailing list Xen-users@lists.xensource.com http://lists.xensource.com/xen-users
The problem seems to be with our network and not of xen. I have asked to my server provider for that. Thank you guys for helping me out. -Kashif> Date: Sat, 26 Sep 2009 10:15:32 +0700 > Subject: Re: [Xen-users] Incorrect Network Traffic > From: fajar@fajar.net > To: kashif_quaidian@hotmail.com > CC: xen-users@lists.xensource.com > > On Fri, Sep 25, 2009 at 10:19 PM, Kashif Ali > <kashif_quaidian@hotmail.com> wrote: > > Hi Fajar, > > > > I have another guest domain and i have assigned no gateway > > It doesn''t matter. If the culprit is on your local network then you > don''t need a gateway to receive that much traffic. > > > [root@test ~]# iftop -n -i eth0 > > -bash: iftop: command not found > > Install it (or whatever tools you like than can pinpoint which host > uses most bandwidth to your server) > > http://ex-parrot.com/pdw/iftop/ > http://dag.wieers.com/rpm/packages/iftop/ > http://packages.debian.org/search?keywords=iftop > > -- > Fajar > > _______________________________________________ > Xen-users mailing list > Xen-users@lists.xensource.com > http://lists.xensource.com/xen-users_________________________________________________________________ Hotmail® has ever-growing storage! Don’t worry about storage limits. http://windowslive.com/Tutorial/Hotmail/Storage?ocid=TXT_TAGLM_WL_HM_Tutorial_Storage_062009 _______________________________________________ Xen-users mailing list Xen-users@lists.xensource.com http://lists.xensource.com/xen-users