26 lines
993 B
Markdown
26 lines
993 B
Markdown
|
# 排查流量激增
|
||
|
|
|
||
|
|
## iftop 纠出大流量 IP
|
||
|
|
|
||
|
|
```bash
|
||
|
|
$ iftop
|
||
|
|
10.21.45.8 => 10.111.100.101 3.35Mb 2.92Mb 2.94Mb
|
||
|
|
<= 194Mb 160Mb 162Mb
|
||
|
|
10.21.45.8 => 10.121.101.22 3.41Mb 2.89Mb 3.04Mb
|
||
|
|
<= 192Mb 159Mb 172Mb
|
||
|
|
10.21.45.8 => 10.22.122.55 279Kb 313Kb 292Kb
|
||
|
|
<= 11.3Kb 12.1Kb 11.9Kb
|
||
|
|
...
|
||
|
|
```
|
||
|
|
|
||
|
|
## netstat 查看大流量 IP 连接
|
||
|
|
|
||
|
|
```bash
|
||
|
|
$ netstat -np | grep 10.121.101.22
|
||
|
|
tcp 0 0 10.21.45.8:48320 10.121.101.22:12002 TIME_WAIT -
|
||
|
|
tcp 0 0 10.21.45.8:59179 10.121.101.22:12002 TIME_WAIT -
|
||
|
|
tcp 0 0 10.21.45.8:55835 10.121.101.22:12002 TIME_WAIT -
|
||
|
|
tcp 0 0 10.21.45.8:49420 10.121.101.22:12002 TIME_WAIT -
|
||
|
|
tcp 0 0 10.21.45.8:55559 10.121.101.22:12002 TIME_WAIT -
|
||
|
|
...
|
||
|
|
```
|