Server generating traffic

Discussion in 'Installation/Configuration' started by kassie, Aug 5, 2008.

  1. kassie

    kassie New Member

    Hi All,

    My ISP is charging me for a lot of traffic on my ISPConfig server.

    I have the firewall turned on.

    I'm running ISPConfig 2.2.24 on Perfect Ubuntu 8

    I have also loaded the vnstats+php frontend.

    It works nicely. Everyday my traffic is inbetween 1 & 1.5Gb. The odd day it is on 8Gb. Is it because my server is hacked????


    Any suggestions are welcome.
     
  2. till

    till Super Moderator Staff Member ISPConfig Developer

    You should check your server with rkhunter. High traffic does normally not mean that your server is hacked. There are mayn different reasons why your traffic could be high, e.g. a link of a popular site to one of your sites or a broken webspider script.
     
  3. kassie

    kassie New Member

    Hi Till,

    Thanks for the speedy reply.

    Will you be able to let me know how to use rkhunter, as i am new to linux
     
  4. till

    till Super Moderator Staff Member ISPConfig Developer

  5. kassie

    kassie New Member

    Hi Till,

    Thanks for the info. It looks a little complicated. I don't have the time now. I will look at it tonight.

    Is there no other way to check??
     
  6. commentator

    commentator Member

    same problem here

    I'm moving from a plesk vps from provider A to a dedicated server, with debian etch and latest 2.x ispconfig, to provider B.
    In the traffic logs of provider B there is a lot in-traffic. That with only some mx records pointing to this server.

    I viewed the logs but can't find where it is comming from.
    netstat shows only one foreign address, my ssh session

    how to check this traffic?
     
  7. falko

    falko Super Moderator ISPConfig Developer

    You could also use chkrootkit.
     

Share This Page