From: Ian Zimmerman <itz@primate.net>
To: gentoo-user@lists.gentoo.org
Subject: [gentoo-user] Re: {OT} Mystery network traffic
Date: Thu, 29 Sep 2016 14:52:04 -0700 [thread overview]
Message-ID: <20160929214816.25841.35B0BECB@matica.foolinux.mooo.com> (raw)
In-Reply-To: <CAN0CFw1eb8wZeTQ9BFPEb8=2chvOXkpJ-oi+wgcTLz_Hhn7acA@mail.gmail.com>
On 2016-09-29 12:47, Grant wrote:
> I was watching cbm on one of my machines and it showed a lot more
> traffic going in and out over lo than over both of the two real
> interfaces. Is that normal? One of those two real interfaces is
> completely unused and shows zeros in cbm all the time.
If I were motivated to investigate this, I'd start with netstat to learn
what ports are active on the interface, then I'd load iptables rules
that pass all traffic on such ports but log it.
Or just use tcpdump? That may by too blunt a tool, though.
--
Please *no* private Cc: on mailing lists and newsgroups
Personal signed mail: please _encrypt_ and sign
Don't clear-text sign: http://cr.yp.to/smtp/8bitmime.html
Why does the arrow on Hillary signs point to the right?
next prev parent reply other threads:[~2016-09-29 21:52 UTC|newest]
Thread overview: 5+ messages / expand[flat|nested] mbox.gz Atom feed top
2016-09-29 19:47 [gentoo-user] {OT} Mystery network traffic Grant
2016-09-29 21:52 ` Ian Zimmerman [this message]
2016-09-30 3:14 ` J. Roeleveld
2016-09-30 11:17 ` Grant
2016-09-30 18:53 ` Mick
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20160929214816.25841.35B0BECB@matica.foolinux.mooo.com \
--to=itz@primate.net \
--cc=gentoo-user@lists.gentoo.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox