=== maxh1 is now known as maxh
=== maxh is now known as Guest19798
[17:14] <dorgan> ok so all of a sudden our outgoing bandwidth on our server has climbed significantly like serving 215GB a month to serving 7,688.81 GB since March 11
[17:14] <dorgan> i've run a chkrootkit and that dint turn up any results
[17:15] <dorgan> so does anyone know if there is a way i can start tracking this down?
[18:17] <dorgan> ok is there any way to tell what type of outgoing traffic is happening on your servers?
[18:44] <dorgan> anyone?
[19:39] <danstoner> dorgan: netstat wouldn't be the worst place to start
[19:41] <danstoner> apache logs?  what other services are you running?
[19:46] <danstoner> This command will tell you who is connected currently and what port they connected on:
[19:46] <danstoner> netstat -n | grep ESTABLISHED
[19:47] <danstoner> Where "who" equals the IP address.