Join Log in
Score:0
realtebo avatar Server

High traffic on loopback interface: how to diagnose the source of this traffic

mu flag
realtebo

Actually I can see on my servers a constant moving of data in and out loopback interface and I cannot understand why. Every 'n' [unpredicatble] seconds, there is a burst event of 3-4 Mbit/s both in and out loopback

enter image description here

I am here to ask suggestions to diagnose

Actually I can give your these infos

 netstat -tunape                                                                                                                     

Active Internet connections (servers and established)
Proto Recv-Q Send-Q Local Address           Foreign Address         State       User       Inode      PID/Program name
tcp        0      0 0.0.0.0:5666            0.0.0.0:*               LISTEN      999        25039      721/nrpe
tcp        0      0 0.0.0.0:1122            0.0.0.0:*               LISTEN      0          23993      696/sshd: /usr/sbin
tcp        0      0 127.0.0.1:3306          0.0.0.0:*               LISTEN      105        27111      784/mariadbd
tcp        0      0 74.207.224.15:1122      77.89.13.110:30806      ESTABLISHED 0          184392     22534/sshd: <redacted_user_name> [
tcp        0      0 127.0.0.1:44324         127.0.0.1:3306          TIME_WAIT   0          0          -
tcp        0      0 127.0.0.1:44318         127.0.0.1:3306          TIME_WAIT   0          0          -
tcp        0      0 127.0.0.1:44326         127.0.0.1:3306          TIME_WAIT   0          0          -
tcp        0      0 127.0.0.1:44320         127.0.0.1:3306          TIME_WAIT   0          0          -
tcp        0      0 127.0.0.1:44312         127.0.0.1:3306          TIME_WAIT   0          0          -
tcp        0      0 127.0.0.1:44310         127.0.0.1:3306          TIME_WAIT   0          0          -
tcp        0      0 127.0.0.1:44316         127.0.0.1:3306          TIME_WAIT   0          0          -
tcp        0      0 127.0.0.1:44314         127.0.0.1:3306          TIME_WAIT   0          0          -
tcp        0      0 127.0.0.1:44322         127.0.0.1:3306          TIME_WAIT   0          0          -
tcp6       0      0 :::443                  :::*                    LISTEN      0          143138     19802/apache2
tcp6       0      0 :::5666                 :::*                    LISTEN      999        25040      721/nrpe
tcp6       0      0 :::1122                 :::*                    LISTEN      0          23995      696/sshd: /usr/sbin
tcp6       0      0 :::80                   :::*                    LISTEN      0          143134     19802/apache2
tcp6       0      0 74.207.224.15:443       5.90.107.155:18983      TIME_WAIT   0          0          -
tcp6       0      0 74.207.224.15:443       5.90.107.155:18970      TIME_WAIT   0          0          -
udp        0      0 0.0.0.0:68              0.0.0.0:*                           0          26979      585/dhclient
udp        0      0 74.207.224.15:123       0.0.0.0:*                           0          24996      685/ntpd
udp        0      0 127.0.0.1:123           0.0.0.0:*                           0          24994      685/ntpd
udp        0      0 0.0.0.0:123             0.0.0.0:*                           0          24990      685/ntpd
udp6       0      0 fe80::f03c:91ff:fe5:123 :::*                                104        27589      685/ntpd
udp6       0      0 ::1:123                 :::*                                0          24998      685/ntpd
udp6       0      0 :::123                  :::*                                0          24987      685/ntpd

I have root access to the VPS, so I can check everything needed. Onyl, I don't know what and how to check

I cannot see nothing of strange looking on htop

I am on a Linode VPS, using Debian 11

40
0 + 0
ธงชาติไทย
Elon Musk
I sit in a Tesla and translated this thread with Ai:

mangohost

Post an answer

Most people don’t grasp that asking a lot of questions unlocks learning and improves interpersonal bonding. In Alison’s studies, for example, though people could accurately recall how many questions had been asked in their conversations, they didn’t intuit the link between questions and liking. Across four studies, in which participants were engaged in conversations themselves or read transcripts of others’ conversations, people tended not to realize that question asking would influence—or had influenced—the level of amity between the conversationalists.