Weird Server Statistics

[Wut]

After upgrade from RC2 to RC4, I've got weird Server Statistics.

Server Statistic (Main Page)

Server Statistic (Day Page)

I quite sure it's fault information but how can I find what component cause this fault traffic ?

[BeNe]

Is this an RootServer a Virtuell Machine ?
Can you please post the output of

Code:

iptables -L -n -v --line-number

So we see if the IPTABLES are right.

Greez BeNe

[Wut]

BeNe Wrote:Is this an RootServer a Virtuell Machine ?
Can you please post the output of

Code:

iptables -L -n -v --line-number

So we see if the IPTABLES are right.

Greez BeNe

It's Real Server.

Here is the result

Chain INPUT (policy ACCEPT 304M packets, 15G bytes)
num pkts bytes target prot opt in out source destination
1 304M 15G ISPCP_INPUT 0 -- * * 0.0.0.0/0 0.0.0.0/0

Chain FORWARD (policy ACCEPT 0 packets, 0 bytes)
num pkts bytes target prot opt in out source destination

Chain OUTPUT (policy ACCEPT 534M packets, 772G bytes)
num pkts bytes target prot opt in out source destination
1 534M 772G ISPCP_OUTPUT 0 -- * * 0.0.0.0/0 0.0.0.0/0

Chain ISPCP_INPUT (1 references)
num pkts bytes target prot opt in out source destination
1 0 0 tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:993
2 0 0 tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:995
3 0 0 tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:587
4 0 0 tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:25
5 0 0 tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:143
6 0 0 tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:110
7 0 0 tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:443
8 2681K 122M tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:80
9 2682K 122M RETURN 0 -- * * 0.0.0.0/0 0.0.0.0/0

Chain ISPCP_OUTPUT (1 references)
num pkts bytes target prot opt in out source destination
1 0 0 tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp spt:993
2 0 0 tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp spt:995
3 0 0 tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp spt:587
4 0 0 tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp spt:25
5 0 0 tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp spt:143
6 0 0 tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp spt:110
7 0 0 tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp spt:443
8 5059K 7349M tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp spt:80
9 5060K 7350M RETURN 0 -- * * 0.0.0.0/0 0.0.0.0/0

[BeNe]

The IPTABLES output ok. There is no such a big Traffic.
Looks like the Traffic Script does not work right on your Server.

Check the Logiles that comes with the CronJob:

Code:

0,30    *       *       *       *  root /var/www/ispcp/engine/traffic/ispcp-srv-traff &>/var/log/ispcp/ispcp-srv-traff.log
0,30    *       *       *       *  root /var/www/ispcp/engine/traffic/ispcp-vrl-traff >/var/log/ispcp/ispcp-vrl-traff.log
15,45   *       *       *       *  root /var/www/ispcp/engine/traffic/ispcp-vrl-traff-correction &>/var/log/ispcp/ispcp-vrl-traff-correction.log

Greez BeNe

[Wut]

ispcp-srv-traff.log and ispcp-vrl-traff-correction.log is empty

ispcp-vrl-traff.log is contain

Code:

sys_command('/bin/cp /var/log/apache2/mydomain.com-traf.log /var/log/ispcp/mydomain.com-traf.log') | $
sys_command()                  | Starting...
gen_log_file()                 | Starting...
collect_http_traffic()         | Starting...
vrl_traff_engine()             | Starting...
vrl_traff_start_up()           | Ending...
zero_traffic_entries()         | Ending...
zero_traffic_entries()         | Starting...
doSQL()                        | Ending...
doSQL()                        | Starting...
doSQL()                        | Ending...
doSQL()                        | Starting...
doSQL()                        | Ending...
doSQL()                        | Starting...
get_conf()                     | Ending...
setup_main_vars()              | Ending...
decrypt_db_password()          | Ending...
decrypt_db_password()          | Starting...
setup_main_vars()              | Starting...
get_file()                     | Ending...
get_file()                     | Starting...
get_conf()                     | Starting...
vrl_traff_start_up()           | Starting...
get_conf()                     | Ending...
setup_main_vars()              | Ending...
decrypt_db_password()          | Ending...
decrypt_db_password()          | Starting...
setup_main_vars()              | Starting...
get_file()                     | Ending...
get_file()                     | Starting...
get_conf()                     | Starting...

[FeG]

Hi,

Wut Wrote:ispcp-srv-traff.log and ispcp-vrl-traff-correction.log is empty

ispcp-vrl-traff.log is contain

Code:

sys_command('/bin/cp /var/log/apache2/mydomain.com-traf.log /var/log/ispcp/mydomain.com-traf.log') | $
...

Same situation here, only ispcp-vrl-traff.log contains logs about more domains..

As already stated in the german forum one month ago, I have the same problem on a real server with Debian Etch and ispCP RC3 running.

I've cleared the server_traffic table but after a while the error occured again:

Quote:4398046523% [81920.00 PB von 1.91 TB]

In the server_traffic table there are lines like these:

Code:

straff_id     traff_time     bytes_in ...
14496         1205712000     18446744073663348234 ...
14400         1205625600     18446744073662364636 ...
13344         1204675200     18446744073661913525 ...

but I don't know where from. The output of iptables -L -n -v --line-number shows no problem...

So I'm interested in a solution for this problem, too

Greetings
FeG

[Wut]

Still waiting for solution

[slonis]

same probleme on lenny with RC4

[kaotix]

I'm also having this issue on Debian Etch and RC4. My usage isn't showing as high as the first guys though but i'm getting around 700 MB every day and have no idea why it is doing this.

[gOOvER]

Please upgrade to RC5a. We don't support older Versions!