Re: [Xen-users] unknown income traffic

[Jingyun He <jingyun.ho@xxxxxxxxx>]

Hi, look at the traffic graph of three vps from the same node.
You are right, seems the bridge sent the traffic to all the port.

I use gitco pre-compiled xen kernel, and just setup the server in the
normal way, nothing special.
the xen versions are from 3.3.1 to 3.4.2, all of these servers have
this problem.

Can you give me more advice to find out the detail of the problem?

Thank you very much.

On Thu, Dec 24, 2009 at 3:47 PM, Fajar A. Nugraha <fajar@xxxxxxxxx> wrote:
> On Thu, Dec 24, 2009 at 8:36 PM, Jingyun He <jingyun.ho@xxxxxxxxx> wrote:
>> Hi, this does not happen every minute, about 2-3 times a day, and
>> every time, it lasts only a few minutes.
>
> and that few minutes causes hundreds of MBs? weird.
>
>> I just run tcpdump for a few hours, and finally catch the following log,
>>
>> Note:
>> xx.xx.198.137 is the ip of the vps I monitored.
>> xx.xx.*.* are the IPs of other VPS in the same node.
>>
>>
>> 20:58:32.989397 IP xx.xx.211.92.http > 117.72.30.40.20552: P
>> 5841:6688(847) ack 0 win 6432
>
> Have you asked your hosting provider about this? It seems to me that
> your provider might have done something to the bridge settings,
> possibly reducing aging time or something, causing it to lose track
> quickly of what MACs are on which port/interface. When that happens
> the bridge would just send the traffic to all ports.
>
> --
> Fajar
>

traffic_graph1.jpg
Description: JPEG image

traffic_graph2.jpg
Description: JPEG image

traffic_graph3.jpg
Description: JPEG image

_______________________________________________
Xen-users mailing list
Xen-users@xxxxxxxxxxxxxxxxxxx
http://lists.xensource.com/xen-users