Hi all!

I got a slight problem. I'm running freeBSD 4.5 and have more incomming then outgoing traffic this is always so, no matter the time. Do you people know what it could be?

See: http://phobos.starhost.nl/mrtg/80.247.195.71_1.html for the mrtg graphs and:
http://phobos.starhost.nl:666/ for the darkstat graphs (incomming and outgoing traafic by ports and hosts).

My /etc/hosts says:

127.0.0.1 localhost.starhost.nl localhost
80.247.195.71 phobos.starhost.nl phobos

And my iprange is: 80.247.195.71-80.247.195.77
Does anyone know why I'm havving more incomming then outgoing traffic? Further more It seems like all hosts @ http://phobos.starhost.nl:666/ are from the local network. So why are they broadvasting messages to me?!

I could be wrong, but I'm guessing that the input and output on the hosts screen in darkstat is relative to that host. So it's sort of reversed if you're thinking of the amount of traffic that they are sending to phobos. Although the traffic may be going somewhere besides phobos.

The only stats screen that really showed an abundance of input is the protocol screen, which showed a lot of UDP input. I'd guess from that there's a DNS issue. Can you set it up to show port 53?
Well, that and port 25 TCP traffic which is normal to have more input than output.

Overall, I think you're just reading the graphs wrong. It doesn't look like you're having any real abundance of input over output.

What do tou mean by setting port 53 up? Because my DNS is running on 2 other servers.

I installed trafshow and that is showing a lot of UDP traffic. Does anyone knows why?

Originally posted by Starhost
What do tou mean by setting port 53 up? Because my DNS is running on 2 other servers.

Which would explain why the server isn't responding with anything to DNS requests, resulting in more input than output.