Ah sorry. That's the only graph I was given. Let me see if I can get more a detailed graph.
The IP in color orange, yellow, green, and blue are mine. The red is somewhere in France. Basically this sflow graph is my VLAN. DC is telling me my server is outputting 70K plus packets per second. Which, I found it quite odd where it says "source address" on top.
Last edited by quad3datwork; 03-30-2011 at 01:09 AM.
Reason: include more details
SysAdmin.xyz Having severs with customer data on it without proper monitoring is like having one night stand without using protections - eventually, there will be an 'oh s**t!' moment.
That looks like an STrend graph and I believe the measurements are in frames, not packets. Still 70K frames per second is a good amount for a single server. It looks like you are, or were, getting attacked as the list is of source addresses and if the red isn't your server then it would be coming from whatever it is.