0

Recently, I have random occurence where I can't reach my server. When this occurs, about 1 ping on each 10 manage to ping back. The ping that do get through are within normal response time (about 42ms in my case).

The only information I could gather so far is my network usage graph. When those timeouts occur, my server recieves unusually HIGH traffic from the internet.

https://i.sstatic.net/ZI0lL.png (today graph) https://i.sstatic.net/i6c2g.png (this week graph)

If this may help, my server is supposed to be under a 100 mbits internet connection.

Am I right to think those spikes are related to my ping's timeout? Also, do anyone have any idea of what this traffic might be? It started about a week ago, nothing has drastically changed in my infrastructure for over a year.

Thank you for your help.

voretaq7
  • 80,749
Kyrotomia
  • 1

3 Answers3

0

It might not be a D(istributed)Dos, but it certainly looks like you're being flooded with traffic. If the times of the traffic correlate to the times when you get ping timeouts, then yes, they are related.

Aaron
  • 2,988
0

I would suspect that this might be more of an issue with your internet provider. Perhaps you share a pipe and someone else is hogging bandwidth.

Belmin Fernandez
  • 11,039
  • 28
  • 89
  • 150
0

I believe the next step for you is to figure out where the traffic is coming from. You could try to make tcpdump write a packet file, and analyze the traffic with wireshark later. That way you can get a good picture of what goes on.

This may be local broadcast storms for all you know.

Kvisle
  • 4,263