From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from lists.gentoo.org (pigeon.gentoo.org [208.92.234.80]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by finch.gentoo.org (Postfix) with ESMTPS id 0C57E138330 for ; Fri, 30 Sep 2016 03:14:14 +0000 (UTC) Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id B242921C039; Fri, 30 Sep 2016 03:14:07 +0000 (UTC) Received: from gw2.antarean.org (gw2.antarean.org [141.105.125.208]) by pigeon.gentoo.org (Postfix) with ESMTP id 43B27E090B for ; Fri, 30 Sep 2016 03:14:07 +0000 (UTC) Received: from localhost (localhost [127.0.0.1]) by gw2.antarean.org (Postfix) with ESMTP id CD8481205ED for ; Fri, 30 Sep 2016 03:10:13 +0000 () X-Virus-Scanned: amavisd-new at antarean.org Received: from gw2.antarean.org ([127.0.0.1]) by localhost (gw2.antarean.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Fww3lzFfRy1m for ; Fri, 30 Sep 2016 03:10:12 +0000 Received: from data.antarean.org (localhost [127.0.0.1]) by gw2.antarean.org (Postfix) with ESMTP id 27CE81204DE for ; Fri, 30 Sep 2016 03:10:12 +0000 () Received: from lan016.nl.antarean.org (lan016.nl.antarean.org [10.20.13.116]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by data.antarean.org (Postfix) with ESMTPSA id B93C658 for ; Fri, 30 Sep 2016 05:10:33 +0200 (CEST) In-Reply-To: References: Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-user@lists.gentoo.org Reply-to: gentoo-user@lists.gentoo.org MIME-Version: 1.0 Content-Transfer-Encoding: 8bit Content-Type: text/plain; charset=UTF-8 Subject: Re: [gentoo-user] {OT} Mystery network traffic From: "J. Roeleveld" Date: Fri, 30 Sep 2016 03:14:03 +0000 To: gentoo-user@lists.gentoo.org Message-ID: <533CB5C3-8FCC-44EE-9B25-7D8A18925822@antarean.org> X-Archives-Salt: 2896a3cd-ac3b-41c4-a578-9bde36e5d41f X-Archives-Hash: 2dc4c7c886c930149e0ab640f8f901ca On September 29, 2016 9:47:27 PM GMT+02:00, Grant wrote: >I was watching cbm on one of my machines and it showed a lot more >traffic going in and out over lo than over both of the two real >interfaces. Is that normal? One of those two real interfaces is >completely unused and shows zeros in cbm all the time. > >- Grant Yes, I would consider this normal. What is running on that machine? 'lo' is used for all traffic between localhost and localhost. IOW, all internal communications, like apache talking to the database if both running on the same host. Or postfix to amavis to postfix before mail gets delivered. -- Joost -- Sent from my Android device with K-9 Mail. Please excuse my brevity.