This is an archived copy of the Xen.org mailing list, which we have preserved to ensure that existing links to archives are not broken. The live archive, which contains the latest emails, can be found at http://lists.xen.org/
Home Products Support Community News


Re: [Xen-users] unknown income traffic

To: "Fajar A. Nugraha" <fajar@xxxxxxxxx>
Subject: Re: [Xen-users] unknown income traffic
From: Jingyun He <jingyun.ho@xxxxxxxxx>
Date: Thu, 24 Dec 2009 19:29:45 +0100
Cc: xen-users@xxxxxxxxxxxxxxxxxxx
Delivery-date: Thu, 24 Dec 2009 10:31:39 -0800
Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:mime-version:received:in-reply-to:references :date:message-id:subject:from:to:cc:content-type; bh=7sfU/C70HS/syYj9GnR9Ql/SRk3XzprirXJMflTzltc=; b=Q30PnsxQNie59fRTpsQRQBEmhMIZnPyrvjSL/l6cL+MSQXNeF5nyW8+BfR7kLM0xoI uzEfQg7R+hsODSAYojhEmNnYurghBy07jWXRsezxGB7fT/YCmlH88ujWR+7oQrch56gL 32k3U2+dkKxbaj1wXVg7LcZ3VWzNrenokV/iA=
Domainkey-signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; b=CBLKF8FZitxZekDfPBMg8u0C5AMVXomfYhVuBqd8/oB/uwQTp+wz/7N8GidqKKlYTR whl/A3U/MhUWFJITn35T53OxkKhx8xQJjypuZa/BOTgWA3/P1JUKKayBHzobvMLnx3lB OrgHqFegfNKB1AyFExFAyoB2VVz3nyryw5VNU=
Envelope-to: www-data@xxxxxxxxxxxxxxxxxxx
In-reply-to: <7207d96f0912240647y55a09860l1afa698a92e37def@xxxxxxxxxxxxxx>
List-help: <mailto:xen-users-request@lists.xensource.com?subject=help>
List-id: Xen user discussion <xen-users.lists.xensource.com>
List-post: <mailto:xen-users@lists.xensource.com>
List-subscribe: <http://lists.xensource.com/mailman/listinfo/xen-users>, <mailto:xen-users-request@lists.xensource.com?subject=subscribe>
List-unsubscribe: <http://lists.xensource.com/mailman/listinfo/xen-users>, <mailto:xen-users-request@lists.xensource.com?subject=unsubscribe>
References: <2f88f10c0912240228v758ec9l7a4675338de1ac77@xxxxxxxxxxxxxx> <7207d96f0912240455h5f01716bn9a62ae8b69ad723@xxxxxxxxxxxxxx> <2f88f10c0912240536r23615f42w39659a9f77a6321c@xxxxxxxxxxxxxx> <7207d96f0912240647y55a09860l1afa698a92e37def@xxxxxxxxxxxxxx>
Sender: xen-users-bounces@xxxxxxxxxxxxxxxxxxx
Hi, look at the traffic graph of three vps from the same node.
You are right, seems the bridge sent the traffic to all the port.

I use gitco pre-compiled xen kernel, and just setup the server in the
normal way, nothing special.
the xen versions are from 3.3.1 to 3.4.2, all of these servers have
this problem.

Can you give me more advice to find out the detail of the problem?

Thank you very much.

On Thu, Dec 24, 2009 at 3:47 PM, Fajar A. Nugraha <fajar@xxxxxxxxx> wrote:
> On Thu, Dec 24, 2009 at 8:36 PM, Jingyun He <jingyun.ho@xxxxxxxxx> wrote:
>> Hi, this does not happen every minute, about 2-3 times a day, and
>> every time, it lasts only a few minutes.
> and that few minutes causes hundreds of MBs? weird.
>> I just run tcpdump for a few hours, and finally catch the following log,
>> Note:
>> xx.xx.198.137 is the ip of the vps I monitored.
>> xx.xx.*.* are the IPs of other VPS in the same node.
>> 20:58:32.989397 IP xx.xx.211.92.http > P
>> 5841:6688(847) ack 0 win 6432
> Have you asked your hosting provider about this? It seems to me that
> your provider might have done something to the bridge settings,
> possibly reducing aging time or something, causing it to lose track
> quickly of what MACs are on which port/interface. When that happens
> the bridge would just send the traffic to all ports.
> --
> Fajar

Attachment: traffic_graph1.jpg
Description: JPEG image

Attachment: traffic_graph2.jpg
Description: JPEG image

Attachment: traffic_graph3.jpg
Description: JPEG image

Xen-users mailing list