Lusca + Sarg = Logs Malucos

blazebr
(usa Ubuntu)

Enviado em 27/09/2013 - 23:45h

Boa noite,

Estou com um problema em um servidor lusca, vejam os logs:

NUM USERID CONNECT BYTES %BYTES IN-CACHE-OUT ELAPSED TIME MILLISEC %TIME
1 G T 192.168.254.55 656 8.22M 15.66% 11.13% 88.87% 00:00:00 0 0.00%
2 G T 78.46.46.219 1.29K 7.44M 14.18% 0.00% 100.00% 00:00:00 0 0.00%
3 G T 204.101.161.20 96 7.29M 13.90% 0.00% 100.00% 00:00:00 0 0.00%
4 G T 87.98.241.82 378 6.06M 11.55% 39.73% 60.27% 00:00:00 0 0.00%
5 G T 65.39.148.84 27 3.65M 6.96% 0.00% 100.00% 00:00:00 0 0.00%
6 G T 87.98.250.61 214 3.35M 6.39% 57.56% 42.44% 00:00:00 0 0.00%
7 G T 198.50.152.105 632 3.06M 5.83% 75.68% 24.32% 00:00:00 0 0.00%
8 G T 198.50.155.231 132 2.00M 3.82% 76.43% 23.57% 00:00:00 0 0.00%
9 G T 94.23.154.129 91 1.89M 3.60% 44.38% 55.62% 00:00:00 0 0.00%
10 G T 198.50.152.102 45 1.79M 3.41% 5.41% 94.59% 00:00:00 0 0.00%
11 G T 198.50.154.234 207 1.14M 2.18% 53.74% 46.26% 00:00:00 0 0.00%
12 G T 207.102.138.149 17 831.19K 1.58% 0.00% 100.00% 00:00:00 0 0.00%
13 G T 94.23.150.70 147 738.13K 1.41% 56.62% 43.38% 00:00:00 0 0.00%
14 G T 210.4.15.34 210 609.01K 1.16% 100.00% 0.00% 00:00:00 0 0.00%
15 G T 210.4.15.31 209 606.08K 1.15% 100.00% 0.00% 00:00:00 0 0.00%
16 G T 210.4.15.33 197 571.31K 1.09% 100.00% 0.00% 00:00:00 0 0.00%
17 G T 87.98.156.21 24 400.99K 0.76% 39.75% 60.25% 00:00:00 0 0.00%
18 G T 198.50.154.236 51 399.52K 0.76% 43.52% 56.48% 00:00:00 0 0.00%
19 G T 210.4.15.32 126 365.39K 0.70% 100.00% 0.00% 00:00:00 0 0.00%
20 G T 198.50.152.104 134 246.61K 0.47% 31.87% 68.13% 00:00:00 0 0.00%
21 G T 199.241.187.62 6 213.43K 0.41% 5.04% 94.96% 00:00:00 0 0.00%
22 G T 23.92.80.28 16 184.75K 0.35% 32.88% 67.12% 00:00:00 0 0.00%
23 G T 95.154.245.236 1 175.87K 0.34% 0.00% 100.00% 00:00:00 0 0.00%
24 G T 192.95.15.21 4 143.49K 0.27% 0.00% 100.00% 00:00:00 0 0.00%
25 G T 185.24.235.200 4 142.59K 0.27% 0.00% 100.00% 00:00:00 0 0.00%
26 G T 87.98.151.112 16 88.78K 0.17% 96.95% 3.05% 00:00:00 0 0.00%
27 G T 87.98.249.39 16 88.77K 0.17% 96.95% 3.05% 00:00:00 0 0.00%
28 G T 178.32.19.9 1 85.51K 0.16% 0.00% 100.00% 00:00:00 0 0.00%
29 G T 188.116.32.7 1 80.46K 0.15% 0.00% 100.00% 00:00:00 0 0.00%
30 G T 178.37.112.210 1 74.14K 0.14% 0.00% 100.00% 00:00:00 0 0.00%
31 G T 88.150.188.206 2 71.63K 0.14% 0.00% 100.00% 00:00:00 0 0.00%
32 G T 193.189.116.101 1 59.56K 0.11% 0.00% 100.00% 00:00:00 0 0.00%
33 G T 192.168.254.90 4 50.23K 0.10% 0.00% 100.00% 00:00:00 0 0.00%
34 G T 220.196.59.195 16 46.40K 0.09% 100.00% 0.00% 00:00:00 0 0.00%
35 G T 96.254.171.2 12 45.27K 0.09% 12.80% 87.20% 00:00:00 0 0.00%
36 G T 176.9.122.238 2 28.13K 0.05% 0.00% 100.00% 00:00:00 0 0.00%
37 G T 204.101.161.159 3 19.37K 0.04% 0.00% 100.00% 00:00:00 0 0.00%
38 G T 208.110.71.90 4 6.02K 0.01% 0.00% 100.00% 00:00:00 0 0.00%
39 G T 198.50.157.211 2 5.79K 0.01% 100.00% 0.00% 00:00:00 0 0.00%
40 G T 54.215.103.111 4 4.18K 0.01% 0.00% 100.00% 00:00:00 0 0.00%
41 G T 54.215.44.31 4 4.18K 0.01% 0.00% 100.00% 00:00:00 0 0.00%
42 G T 204.236.180.8 4 4.16K 0.01% 0.00% 100.00% 00:00:00 0 0.00%
43 G T 50.18.96.118 4 4.14K 0.01% 0.00% 100.00% 00:00:00 0 0.00%
44 G T 54.215.35.104 3 3.38K 0.01% 0.00% 100.00% 00:00:00 0 0.00%
45 G T 184.169.226.219 3 3.16K 0.01% 0.00% 100.00% 00:00:00 0 0.00%
46 G T 54.241.127.158 3 3.15K 0.01% 0.00% 100.00% 00:00:00 0 0.00%
47 G T 50.18.100.111 3 3.15K 0.01% 0.00% 100.00% 00:00:00 0 0.00%
48 G T 54.219.34.204 3 3.14K 0.01% 0.00% 100.00% 00:00:00 0 0.00%
49 G T 54.241.93.115 3 3.14K 0.01% 0.00% 100.00% 00:00:00 0 0.00%
50 G T 54.241.217.91 3 3.14K 0.01% 0.00% 100.00% 00:00:00 0 0.00%
51 G T 54.241.200.78 3 3.14K 0.01% 0.00% 100.00% 00:00:00 0 0.00%
52 G T 54.215.94.242 3 3.13K 0.01% 0.00% 100.00% 00:00:00 0 0.00%
53 G T 184.169.205.44 3 3.13K 0.01% 0.00% 100.00% 00:00:00 0 0.00%
54 G T 54.215.56.253 3 3.13K 0.01% 0.00% 100.00% 00:00:00 0 0.00%
55 G T 54.215.50.18 3 3.13K 0.01% 0.00% 100.00% 00:00:00 0 0.00%
56 G T 50.18.21.29 3 3.13K 0.01% 0.00% 100.00% 00:00:00 0 0.00%
57 G T 54.215.65.124 3 3.12K 0.01% 0.00% 100.00% 00:00:00 0 0.00%
58 G T 54.241.46.1 3 3.12K 0.01% 0.00% 100.00% 00:00:00 0 0.00%
59 G T 184.72.10.72 3 3.12K 0.01% 0.00% 100.00% 00:00:00 0 0.00%
60 G T 54.215.88.58 3 3.12K 0.01% 0.00% 100.00% 00:00:00 0 0.00%
61 G T 54.241.112.32 3 3.11K 0.01% 0.00% 100.00% 00:00:00 0 0.00%
62 G T 54.215.124.214 3 3.10K 0.01% 0.00% 100.00% 00:00:00 0 0.00%
63 G T 188.165.251.72 1 2.91K 0.01% 100.00% 0.00% 00:00:00 0 0.00%
64 G T 184.82.29.119 1 2.89K 0.01% 100.00% 0.00% 00:00:00 0 0.00%
65 G T 50.18.142.155 2 2.44K 0.00% 0.00% 100.00% 00:00:00 0 0.00%
66 G T 54.241.211.227 3 2.39K 0.00% 0.00% 100.00% 00:00:00 0 0.00%
67 G T 54.241.203.240 2 2.34K 0.00% 0.00% 100.00% 00:00:00 0 0.00%
68 G T 50.18.73.43 2 2.11K 0.00% 0.00% 100.00% 00:00:00 0 0.00%
69 G T 50.18.132.91 2 2.11K 0.00% 0.00% 100.00% 00:00:00 0 0.00%
70 G T 204.236.177.98 2 2.11K 0.00% 0.00% 100.00% 00:00:00 0 0.00%
71 G T 54.241.123.134 2 2.11K 0.00% 0.00% 100.00% 00:00:00 0 0.00%
72 G T 50.18.24.194 2 2.10K 0.00% 0.00% 100.00% 00:00:00 0 0.00%
73 G T 184.169.230.86 2 2.10K 0.00% 0.00% 100.00% 00:00:00 0 0.00%
74 G T 54.215.30.30 2 2.10K 0.00% 0.00% 100.00% 00:00:00 0 0.00%
75 G T 54.215.78.213 2 2.10K 0.00% 0.00% 100.00% 00:00:00 0 0.00%
76 G T 50.18.147.191 2 2.09K 0.00% 0.00% 100.00% 00:00:00 0 0.00%
77 G T 54.241.65.217 2 2.09K 0.00% 0.00% 100.00% 00:00:00 0 0.00%
78 G T 54.215.54.38 2 2.09K 0.00% 0.00% 100.00% 00:00:00 0 0.00%
79 G T 204.236.166.185 2 2.09K 0.00% 0.00% 100.00% 00:00:00 0 0.00%
80 G T 54.241.198.240 2 2.09K 0.00% 0.00% 100.00% 00:00:00 0 0.00%
81 G T 54.215.114.207 2 2.09K 0.00% 0.00% 100.00% 00:00:00 0 0.00%
82 G T 184.169.214.115 2 2.09K 0.00% 0.00% 100.00% 00:00:00 0 0.00%
83 G T 54.241.232.45 2 2.09K 0.00% 0.00% 100.00% 00:00:00 0 0.00%
84 G T 54.215.99.8 2 2.08K 0.00% 0.00% 100.00% 00:00:00 0 0.00%
85 G T 54.241.52.39 2 2.08K 0.00% 0.00% 100.00% 00:00:00 0 0.00%
86 G T 54.241.103.203 2 2.08K 0.00% 0.00% 100.00% 00:00:00 0 0.00%
87 G T 204.236.165.239 2 2.08K 0.00% 0.00% 100.00% 00:00:00 0 0.00%
88 G T 54.215.84.64 2 2.08K 0.00% 0.00% 100.00% 00:00:00 0 0.00%
89 G T 54.241.230.219 2 2.08K 0.00% 0.00% 100.00% 00:00:00 0 0.00%
90 G T 54.241.108.24 2 2.07K 0.00% 0.00% 100.00% 00:00:00 0 0.00%
91 G T 54.241.74.175 2 2.07K 0.00% 0.00% 100.00% 00:00:00 0 0.00%
92 G T 184.169.247.32 2 2.07K 0.00% 0.00% 100.00% 00:00:00 0 0.00%
93 G T 54.215.67.56 2 2.07K 0.00% 0.00% 100.00% 00:00:00 0 0.00%
94 G T 54.241.208.90 1 1.43K 0.00% 0.00% 100.00% 00:00:00 0 0.00%
95 G T 54.241.59.49 1 1.05K 0.00% 0.00% 100.00% 00:00:00 0 0.00%
96 G T 54.215.49.99 1 1.05K 0.00% 0.00% 100.00% 00:00:00 0 0.00%
97 G T 184.72.0.74 1 1.05K 0.00% 0.00% 100.00% 00:00:00 0 0.00%
98 G T 54.241.217.34 1 1.05K 0.00% 0.00% 100.00% 00:00:00 0 0.00%
99 G T 54.219.26.62 1 1.05K 0.00% 0.00% 100.00% 00:00:00 0 0.00%
100 G T 54.215.33.75 1 1.05K 0.00% 0.00% 100.00% 00:00:00 0 0.00%
101 G T 54.219.26.100 1 1.05K 0.00% 0.00% 100.00% 00:00:00 0 0.00%
102 G T 54.241.113.246 1 1.05K 0.00% 0.00% 100.00% 00:00:00 0 0.00%
103 G T 54.219.42.231 1 1.05K 0.00% 0.00% 100.00% 00:00:00 0 0.00%
104 G T 54.215.39.185 1 1.05K 0.00% 0.00% 100.00% 00:00:00 0 0.00%
105 G T 54.215.121.16 1 1.05K 0.00% 0.00% 100.00% 00:00:00 0 0.00%
106 G T 204.236.168.86 1 1.05K 0.00% 0.00% 100.00% 00:00:00 0 0.00%
107 G T 204.236.136.9 1 1.05K 0.00% 0.00% 100.00% 00:00:00 0 0.00%
108 G T 54.219.15.117 1 1.05K 0.00% 0.00% 100.00% 00:00:00 0 0.00%
109 G T 184.169.238.213 1 1.05K 0.00% 0.00% 100.00% 00:00:00 0 0.00%
110 G T 184.169.187.25 1 1.05K 0.00% 0.00% 100.00% 00:00:00 0 0.00%
111 G T 54.241.230.33 1 1.05K 0.00% 0.00% 100.00% 00:00:00 0 0.00%
112 G T 50.18.9.187 1 1.05K 0.00% 0.00% 100.00% 00:00:00 0 0.00%
113 G T 50.18.0.55 1 1.05K 0.00% 0.00% 100.00% 00:00:00 0 0.00%
114 G T 204.236.154.115 1 1.05K 0.00% 0.00% 100.00% 00:00:00 0 0.00%
115 G T 184.169.220.42 1 1.05K 0.00% 0.00% 100.00% 00:00:00 0 0.00%
116 G T 54.241.107.36 1 1.05K 0.00% 0.00% 100.00% 00:00:00 0 0.00%
117 G T 184.73.40.137 1 1.05K 0.00% 0.00% 100.00% 00:00:00 0 0.00%
118 G T 54.215.50.253 1 1.05K 0.00% 0.00% 100.00% 00:00:00 0 0.00%
119 G T 204.236.154.76 1 1.05K 0.00% 0.00% 100.00% 00:00:00 0 0.00%
120 G T 184.72.20.12 1 1.05K 0.00% 0.00% 100.00% 00:00:00 0 0.00%
121 G T 54.241.49.159 1 1.05K 0.00% 0.00% 100.00% 00:00:00 0 0.00%
122 G T 54.215.95.128 1 1.05K 0.00% 0.00% 100.00% 00:00:00 0 0.00%
123 G T 54.215.36.147 1 1.04K 0.00% 0.00% 100.00% 00:00:00 0 0.00%
124 G T 54.215.73.235 1 1.03K 0.00% 0.00% 100.00% 00:00:00 0 0.00%
125 G T 50.18.92.205 1 1.03K 0.00% 0.00% 100.00% 00:00:00 0 0.00%
126 G T 54.241.53.21 1 1.03K 0.00% 0.00% 100.00% 00:00:00 0 0.00%
127 G T 54.241.44.79 1 1.03K 0.00% 0.00% 100.00% 00:00:00 0 0.00%
128 G T 54.215.92.194 1 1.03K 0.00% 0.00% 100.00% 00:00:00 0 0.00%
129 G T 54.215.39.80 1 1.03K 0.00% 0.00% 100.00% 00:00:00 0 0.00%
130 G T 184.169.188.61 1 1.03K 0.00% 0.00% 100.00% 00:00:00 0 0.00%
131 G T 54.241.91.86 1 1.03K 0.00% 0.00% 100.00% 00:00:00 0 0.00%
132 G T 54.215.90.5 1 1.03K 0.00% 0.00% 100.00% 00:00:00 0 0.00%
133 G T 54.215.39.10 1 1.03K 0.00% 0.00% 100.00% 00:00:00 0 0.00%
134 G T 54.215.35.94 1 1.03K 0.00% 0.00% 100.00% 00:00:00 0 0.00%
135 G T 54.215.21.126 1 1.03K 0.00% 0.00% 100.00% 00:00:00 0 0.00%
136 G T 54.215.44.169 1 1.03K 0.00% 0.00% 100.00% 00:00:00 0 0.00%
137 G T 54.215.27.12 1 1.03K 0.00% 0.00% 100.00% 00:00:00 0 0.00%
138 G T 184.72.28.101 1 1.03K 0.00% 0.00% 100.00% 00:00:00 0 0.00%
139 G T 31.133.13.232 1 901 0.00% 100.00% 0.00% 00:00:00 0 0.00%
140 G T 192.168.254.50 1 523 0.00% 0.00% 100.00% 00:00:00 0 0.00%
TOTAL 5.18K 52.49M 26.56% 73.44% 00:00:00 0
AVERAGE 37 374.97K 00:00:00 0

A minha LAN é a 192.168.254.0, mas os demais ips estão preenchendo toda a lista e a cada momento ela aumenta, consumindo toda minha banda de upload e impossibilitando a utilização de serviços em tempo real.
Alguém poderia me explicar o que esta acontecendo? A minha intenção é criar um proxy para a rede local (que faz o cache das requisições para internet) e não um proxy aberto para que usuários externos utilizem a internet.
Poderiam me ajudar?

blazebr
(usa Ubuntu)

Enviado em 28/09/2013 - 17:44h

Consegui resolver, não sei onde estava com a cabeça quando abri a porta 3128 para a wan, basicamente foi so fechar esta porta que os IPs estranhos desapareceram.