不正常的网络流量

gnfzc · 发表于 2005-1-20 19:39:28

我debian系统，只开ssh，
在自己没有进行任何网络操作的情况下，发现长时间显示有大流量的网络数据，
最高时竟达50多K，
这有点不正常吧？

gnfzc · 发表于 2005-1-20 19:46:05

怎么图片不能显示？
要联接：

junjun · 发表于 2005-1-21 23:47:17

You can use ethereal to capture network traffic ,then analysis what is happening.
Or ,use 'netstat' command to check what link have established.

gnfzc · 发表于 2005-1-24 18:50:30

没有对网络进行任何操作，ppp0显示3.2K，这时运行netstat，显示如下：
（请问那几个ip地址是什么？谢谢。）

# netstat
Active Internet connections (w/o servers)
Proto Recv-Q Send-Q Local Address Foreign Address State
tcp 0 0 218.15.254:microsoft-ds 218.15.226.82:1864 ESTABLISHED
tcp 0 0 218.15.254:microsoft-ds 218.15.254.184:2499 ESTABLISHED
tcp 0 0 218.15.254:microsoft-ds 218.15.123.115:3257 ESTABLISHED
tcp 0 0 218.15.254:microsoft-ds 218.15.196.93:3377 ESTABLISHED
tcp 0 0 218.15.254:microsoft-ds 218.15.254.184:4150 ESTABLISHED
tcp 0 0 218.15.254:microsoft-ds 218.15.197.38:bgpd FIN_WAIT2
tcp 0 0 218.15.254:microsoft-ds 218.15.254.184:4414 ESTABLISHED
Active UNIX domain sockets (w/o servers)
Proto RefCnt Flags Type State I-Node Path
unix 9 [ ] DGRAM 3301 /dev/log
unix 3 [ ] STREAM CONNECTED 6854 /tmp/.X11-unix/X0
unix 3 [ ] STREAM CONNECTED 6853
unix 3 [ ] STREAM CONNECTED 6798 /tmp/.famOGchXC
unix 3 [ ] STREAM CONNECTED 6796
unix 2 [ ] DGRAM 5835
unix 3 [ ] STREAM CONNECTED 5826 /tmp/.ICE-unix/dcop3406-1106562728
unix 3 [ ] STREAM CONNECTED 5825
unix 3 [ ] STREAM CONNECTED 5820 /tmp/.ICE-unix/3427
unix 3 [ ] STREAM CONNECTED 5819
unix 3 [ ] STREAM CONNECTED 5818 /tmp/.X11-unix/X0
unix 3 [ ] STREAM CONNECTED 5817
unix 3 [ ] STREAM CONNECTED 5229 /tmp/.X11-unix/X0
unix 3 [ ] STREAM CONNECTED 5228
unix 3 [ ] STREAM CONNECTED 4792 /tmp/.fam6OvUU7
unix 3 [ ] STREAM CONNECTED 4791
unix 3 [ ] STREAM CONNECTED 4779 /tmp/.ICE-unix/3427
unix 3 [ ] STREAM CONNECTED 4778
unix 3 [ ] STREAM CONNECTED 4775 /tmp/.X11-unix/X0
unix 3 [ ] STREAM CONNECTED 4774
unix 3 [ ] STREAM CONNECTED 4771 /tmp/.ICE-unix/dcop3406-1106562728
unix 3 [ ] STREAM CONNECTED 4770
unix 3 [ ] STREAM CONNECTED 4743 /tmp/.ICE-unix/3427
unix 3 [ ] STREAM CONNECTED 4742
unix 3 [ ] STREAM CONNECTED 4740 /tmp/.X11-unix/X0
unix 3 [ ] STREAM CONNECTED 4739
unix 3 [ ] STREAM CONNECTED 4738 /tmp/.ICE-unix/dcop3406-1106562728
unix 3 [ ] STREAM CONNECTED 4737
unix 3 [ ] STREAM CONNECTED 4728 /tmp/.ICE-unix/3427
unix 3 [ ] STREAM CONNECTED 4727
unix 3 [ ] STREAM CONNECTED 4720 /tmp/.X11-unix/X0
unix 3 [ ] STREAM CONNECTED 4719
unix 3 [ ] STREAM CONNECTED 4712 /tmp/.X11-unix/X0
unix 3 [ ] STREAM CONNECTED 4711
unix 3 [ ] STREAM CONNECTED 4702 /tmp/.ICE-unix/3427
unix 3 [ ] STREAM CONNECTED 4701
unix 3 [ ] STREAM CONNECTED 4700 /tmp/.X11-unix/X0
unix 3 [ ] STREAM CONNECTED 4699
unix 3 [ ] STREAM CONNECTED 4698 /tmp/.ICE-unix/dcop3406-1106562728
unix 3 [ ] STREAM CONNECTED 4697
unix 3 [ ] STREAM CONNECTED 4684 /tmp/.ICE-unix/3427
unix 3 [ ] STREAM CONNECTED 4683
unix 3 [ ] STREAM CONNECTED 4680 /tmp/.X11-unix/X0
unix 3 [ ] STREAM CONNECTED 4679
unix 3 [ ] STREAM CONNECTED 4678 /tmp/.ICE-unix/dcop3406-1106562728
unix 3 [ ] STREAM CONNECTED 4677
unix 3 [ ] STREAM CONNECTED 4670 /tmp/.ICE-unix/3427
unix 3 [ ] STREAM CONNECTED 4669
unix 3 [ ] STREAM CONNECTED 4665 /tmp/.X11-unix/X0
unix 3 [ ] STREAM CONNECTED 4664
unix 3 [ ] STREAM CONNECTED 4663 /tmp/.ICE-unix/dcop3406-1106562728
unix 3 [ ] STREAM CONNECTED 4662
unix 3 [ ] STREAM CONNECTED 4656 /tmp/.ICE-unix/3427
unix 3 [ ] STREAM CONNECTED 4655
unix 3 [ ] STREAM CONNECTED 4652 /tmp/.ICE-unix/dcop3406-1106562728
unix 3 [ ] STREAM CONNECTED 4651
unix 3 [ ] STREAM CONNECTED 4643 /tmp/.ICE-unix/3427
unix 3 [ ] STREAM CONNECTED 4642
unix 3 [ ] STREAM CONNECTED 4641 /tmp/.X11-unix/X0
unix 3 [ ] STREAM CONNECTED 4640
unix 3 [ ] STREAM CONNECTED 4633 /tmp/.ICE-unix/dcop3406-1106562728
unix 3 [ ] STREAM CONNECTED 4632
unix 3 [ ] STREAM CONNECTED 4624 /tmp/.X11-unix/X0
unix 3 [ ] STREAM CONNECTED 4623
unix 3 [ ] STREAM CONNECTED 4617 /tmp/ksocket-cong/kdeinit__0
unix 3 [ ] STREAM CONNECTED 4616
unix 3 [ ] STREAM CONNECTED 4611 /tmp/mcop-cong/zxb-0d59-41f4ceb5
unix 3 [ ] STREAM CONNECTED 4610
unix 3 [ ] STREAM CONNECTED 4580 /tmp/.X11-unix/X0
unix 3 [ ] STREAM CONNECTED 4579
unix 3 [ ] STREAM CONNECTED 4578 /tmp/.ICE-unix/dcop3406-1106562728
unix 3 [ ] STREAM CONNECTED 4577
unix 3 [ ] STREAM CONNECTED 4534 /tmp/.X11-unix/X0
unix 3 [ ] STREAM CONNECTED 4533
unix 3 [ ] STREAM CONNECTED 4528 /tmp/.X11-unix/X0
unix 3 [ ] STREAM CONNECTED 4527
unix 3 [ ] STREAM CONNECTED 4497 /tmp/.famQm7UJk
unix 3 [ ] STREAM CONNECTED 4496
unix 3 [ ] STREAM CONNECTED 4483 /tmp/.X11-unix/X0
unix 3 [ ] STREAM CONNECTED 4482
unix 3 [ ] STREAM CONNECTED 4481 /tmp/.ICE-unix/dcop3406-1106562728
unix 3 [ ] STREAM CONNECTED 4480
unix 3 [ ] STREAM CONNECTED 4463 /tmp/.ICE-unix/dcop3406-1106562728
unix 3 [ ] STREAM CONNECTED 4462
unix 3 [ ] STREAM CONNECTED 4458
unix 3 [ ] STREAM CONNECTED 4457
unix 3 [ ] STREAM CONNECTED 4315 /tmp/.X11-unix/X0
unix 3 [ ] STREAM CONNECTED 4303
unix 2 [ ] DGRAM 4182
unix 2 [ ] DGRAM 4159
unix 2 [ ] DGRAM 4158
unix 2 [ ] DGRAM 3647
unix 2 [ ] DGRAM 3322
unix 2 [ ] DGRAM 3317

复制代码

gnfzc · 发表于 2005-1-24 19:13:45

再来一个截图：

bst · 发表于 2005-1-24 21:14:25

抓包看看.

gnfzc · 发表于 2005-1-24 21:32:46

怎么抓？怎么看？我可是一窍不通呀！

		自动登录	找回密码
密码			注册

不正常的网络流量

本帖子中包含更多资源