Trafego de rede muito alto

themak666
(usa Debian)

Enviado em 14/01/2008 - 12:48h

Olá Pessoal,

Instalei o Debian Etch em uma máquina "básica" apenas para utilizar o squid como um proxy. Configurei o proxy transparente com bloqueios a msn e sites normamente, porém eu reparei que mesmo quando não tem nenhum usuário conectado no proxy o trafego pela placa eth0 (link com o modem de internet) fica com uma taxa de trasferencia em torno de 400 a 450 kbps.
Eu andei olhando os processos que estão executando e não pareceu ter nada de anormal.
Alguém poderia me dizer o que pode estar transferindo essa qtde de pacotes para a internet?
abaixo segue o resultado do comando #ps -aux com os processos executando no servidor

obrigado

-------------------------------------------------
root 1 0.0 0.5 1940 648 ? Ss 04:17 0:03 init [2]
root 2 0.0 0.0 0 0 ? S 04:17 0:00 [migration/0]
root 3 0.0 0.0 0 0 ? SN 04:17 0:00 [ksoftirqd/0]
root 4 0.0 0.0 0 0 ? S< 04:17 0:00 [events/0]
root 5 0.0 0.0 0 0 ? S< 04:17 0:00 [khelper]
root 6 0.0 0.0 0 0 ? S< 04:17 0:00 [kthread]
root 9 0.0 0.0 0 0 ? S< 04:17 0:00 [kblockd/0]
root 10 0.0 0.0 0 0 ? S< 04:17 0:00 [kacpid]
root 62 0.0 0.0 0 0 ? S< 04:17 0:00 [kseriod]
root 96 0.0 0.0 0 0 ? S 04:17 0:00 [pdflush]
root 97 0.0 0.0 0 0 ? S 04:17 0:00 [pdflush]
root 98 0.0 0.0 0 0 ? S< 04:17 0:01 [kswapd0]
root 99 0.0 0.0 0 0 ? S< 04:17 0:00 [aio/0]
root 580 0.0 0.0 0 0 ? S< 04:17 0:00 [khubd]
root 853 0.1 0.0 0 0 ? S< 04:17 0:21 [kjournald]
root 1030 0.0 0.4 2180 592 ? S<s 04:17 0:00 udevd --daemon
root 1336 0.0 0.0 0 0 ? S< 04:17 0:00 [kpsmoused]
root 1339 0.0 0.0 0 0 ? S< 04:17 0:00 [kgameportd]
root 1596 0.0 0.0 0 0 ? S< 04:17 0:00 [kmirrord]
root 1700 0.0 0.6 2176 764 ? Ss 04:18 0:00 dhclient3 -pf /var/run/dhclient.eth
daemon 1723 0.0 0.2 1684 364 ? Ss 04:18 0:00 /sbin/portmap
root 1946 0.0 0.5 1624 640 ? Ss 04:18 0:00 /sbin/syslogd
root 1952 0.0 0.2 1580 380 ? Ss 04:18 0:00 /sbin/klogd -x
root 2024 0.0 0.4 1572 556 ? Ss 04:18 0:00 /usr/sbin/acpid -c /etc/acpi/events
nobody 2076 0.0 0.5 1912 732 ? Ss 04:18 0:00 /usr/bin/no-ip
root 2083 0.0 0.4 1748 568 ? Ss 04:18 0:00 /usr/sbin/inetd
root 2148 0.0 1.0 5868 1344 ? Ss 04:18 0:00 /usr/sbin/nmbd -D
root 2151 0.0 1.9 9056 2456 ? Ss 04:18 0:00 /usr/sbin/smbd -D
root 2162 0.0 0.8 9056 1088 ? S 04:18 0:00 /usr/sbin/smbd -D
root 2177 0.0 0.8 4920 1084 ? Ss 04:18 0:00 /usr/sbin/sshd
statd 2207 0.0 0.5 1756 732 ? Ss 04:18 0:00 /sbin/rpc.statd
root 2225 0.0 0.5 4760 752 ? Ss 04:18 0:00 /usr/sbin/squid -D -sYC
proxy 2227 2.0 26.9 65124 34288 ? S 04:18 6:30 (squid) -D -sYC
daemon 2238 0.0 0.3 1828 420 ? Ss 04:18 0:00 /usr/sbin/atd
proxy 2245 0.0 0.2 1420 280 ? Ss 04:18 0:00 (unlinkd)
root 2246 0.0 0.6 2192 864 ? Ss 04:18 0:00 /usr/sbin/cron
proxy 2261 0.0 0.3 2288 492 ? Ss 04:18 0:00 diskd 2280448 2280449 2280450
root 2274 0.0 0.3 1576 492 tty2 Ss+ 04:18 0:00 /sbin/getty 38400 tty2
root 2275 0.0 0.3 1572 492 tty3 Ss+ 04:18 0:00 /sbin/getty 38400 tty3
root 2276 0.0 0.3 1576 492 tty4 Ss+ 04:18 0:00 /sbin/getty 38400 tty4
root 2277 0.0 0.3 1572 488 tty5 Ss+ 04:18 0:00 /sbin/getty 38400 tty5
root 2278 0.0 0.3 1576 496 tty6 Ss+ 04:18 0:00 /sbin/getty 38400 tty6
identd 4330 0.0 0.9 76984 1212 ? Ssl 04:22 0:05 identd
root 7395 0.0 0.3 1576 492 tty1 Ss+ 04:26 0:00 /sbin/getty 38400 tty1
root 19117 0.2 1.9 7852 2472 ? Ss 09:29 0:00 sshd: root@pts/0
root 19122 0.0 1.3 3976 1696 pts/0 Ss 09:29 0:00 -bash
--------------------------------------------------

wwlysses
(usa Debian)

Enviado em 26/04/2008 - 14:41h

olah, eu estava conversando com um amigo usando conta msn, rodando pelo pidgin e derepente uma 3ª pessoa começou a falar [*****] em nossa conversa, na mesma hora fui no ps aux e os processos q ele estava rodando saum parecidos com os q vc descreve!! aÊh pessoal do VOL gostaria de saber como bloquear isso!! rastrear,..... enfim como me protejer disso!!

root 4022 0.0 0.1 1696 520 tty2 Ss+ 13:09 0:00 /sbin/getty 38400 tty2
root 4026 0.0 0.1 1692 516 tty3 Ss+ 13:09 0:00 /sbin/getty 38400 tty3
root 4027 0.0 0.1 1696 520 tty1 Ss+ 13:09 0:00 /sbin/getty 38400 tty1
root 4028 0.0 0.1 1692 516 tty6 Ss+ 13:09 0:00 /sbin/getty 38400 tty6
root 4200 0.0 0.2 2436 1324 ? Ss 13:09 0:00 /usr/sbin/acpid -c /etc/acpi/events -s /var/run/acpid.socket
root 4227 0.0 0.0 0 0 ? S< 13:09 0:00 [kondemand/0]
syslog 4313 0.0 0.1 1912 732 ? Ss 13:09 0:00 /sbin/syslogd -u syslog
root 4372 0.0 0.1 1836 536 ? S 13:09 0:00 /bin/dd bs 1 if /proc/kmsg of /var/run/klogd/kmsg
klog 4374 0.0 0.2 2504 1396 ? Ss 13:09 0:00 /sbin/klogd -P /var/run/klogd/kmsg
105 4395 0.0 0.2 2908 1064 ? Ss 13:09 0:00 /usr/bin/dbus-daemon --system
root 4411 0.0 0.3 4364 1928 ? Ss 13:09 0:00 /usr/sbin/NetworkManager --pid-file /var/run/NetworkManager/NetworkManager.pid
root 4424 0.0 0.2 3252 1144 ? Ss 13:09 0:00 /usr/sbin/NetworkManagerDispatcher --pid-file /var/run/NetworkManager/NetworkManagerDispatcher.pid
107 4444 0.0 0.7 5652 3756 ? Ss 13:09 0:00 /usr/sbin/hald
root 4445 0.0 0.1 3096 1024 ? S 13:09 0:00 hald-runner
107 4486 0.0 0.1 2164 900 ? S 13:09 0:00 hald-addon-keyboard: listening on /dev/input/event1
107 4487 0.0 0.1 2160 892 ? S 13:09 0:00 hald-addon-keyboard: listening on /dev/input/event4
107 4488 0.0 0.1 2164 896 ? S 13:09 0:00 hald-addon-keyboard: listening on /dev/input/event5
107 4492 0.0 0.1 2164 884 ? S 13:09 0:00 hald-addon-acpi: listening on acpid socket /var/run/acpid.socket
root 4522 0.0 0.1 2944 620 ? Ss 13:09 0:00 /usr/bin/kdm -config /var/run/kdm/kdmrc
root 4532 8.9 15.3 117424 79384 tty7 SLs+ 13:09 7:30 /usr/bin/X -br -nolisten tcp :0 vt7 -auth /var/run/xauth/A:0-bGWufz
root 4544 0.0 0.1 5280 968 ? Ss 13:09 0:00 /usr/sbin/sshd
root 4573 0.0 0.2 3928 1532 ? S 13:09 0:00 -:0
107 4578 0.0 0.2 3260 1188 ? S 13:09 0:00 hald-addon-storage: polling /dev/scd0 (every 2 sec)
root 4579 0.0 0.4 5804 2088 ? Ss 13:09 0:00 /usr/sbin/cupsd
avahi 4682 0.0 0.2 2732 1368 ? Ss 13:09 0:00 avahi-daemon: running [wwlysses-desktop.local]
avahi 4683 0.0 0.0 2732 456 ? Ss 13:09 0:00 avahi-daemon: chroot helper
root 4699 0.0 0.1 1992 756 ? Ss 13:09 0:00 /usr/sbin/dhcdbd --system
root 4719 0.0 0.2 2924 1184 ? Ss 13:09 0:00 /usr/sbin/hcid -x -s
root 4729 0.0 0.1 2768 976 ? S 13:09 0:00 /usr/lib/bluetooth/bluetoothd-service-input
root 4730 0.0 0.2 2844 1212 ? S 13:09 0:00 /usr/lib/bluetooth/bluetoothd-service-audio
root 4738 0.0 0.0 0 0 ? S< 13:09 0:00 [krfcommd]