stevepfannjr
Level 1
(0 points)
Q: Analyze Network Traffic
Dear Apple community,
This morning I looked at the network stats is the Server App, and noticed an odd and unexpected traffic spike that happened around 3 to 4 in the morning. I was wondering if there is a way for me to look into this traffic (origin and destination etc.)
It's probably nothing for me to worry about as it was only a few hundred KB/s, but I'd like to be able to get to the bottom of this just to put my mind at ease.
A few things that may be worth mentioning is that a few days ago I installed SuperDuper! to manage some backup processes, and that a local know user has been idly logged into the server via the file sharing for a number of weeks. I don't know if either of these items could have contributed to the problem.
Any advice?
Steve
OS X Server
MrHoffman
Level 6
(15,637 points)
That's around the time that the nightly jobs run. Those kick off around 3 AM local time.
As for your question, here's a general intro of how to capture a packet trace, and you'll probably want to establish some sort of network monitoring on another host on your local network. There are some reasonable tcpdump primers available around the 'net, including one by Daniel Miessler, too.
I usually use a server-grade gateway-firewall for this sort of stuff (as well as a variety of other tasks), and most of these devices can minimally show you where the network connections are going; IP source and destination.
