[BlueOnyx:09263] Re: Traffice increase

[Ken - Precision Web Hosting, Inc]

----- Original Message ----- 
From: "Maurice de Laat" <mdlaat at muisnetwerken.nl>


> Roy and Chris,
>
> Thanks for your response.
>
> On Tue, Dec 20, 2011 at 05:42:02PM -0600, Chris Gebhardt - VIRTBIZ 
> Internet wrote:
>
>> Roy Urick wrote:
>> > Do you have physical access to run wire shark on the line? That might
>> > shed more light on the situation.
>>
>> Or even if you do not have physical access, can you spin up a VPS to run
>> it, or NTOP, or similar and monitor the port on your switch?
>
> Unfortunatly no physical access nor the possibility to monitor the port on
> the switch (except for the amount of traffic).
>
> -- 
> Maurice de Laat
> Muis Netwerken


Maurice

Are you actually getting more regular traffic if you check the sites' 
awstats graphs?

Or if you suspect somethign malicious,
Anything suspicious when you look at the running processes with
ps fauxw

or in /tmp
or using
netstat -tupan


Do you disable dnagerous  functions in your php.ini like
disable_functions=dl,shell_exec,passthru,exec,popen,system,proc_get_status,proc_nice,proc_open,proc_terminate,proc_close



----
Ken Marcus
Precision Web Hosting, Inc.
http://www.precisionweb.net