ESXi server with virtual machines started sending 600K packets per second, how to solve this problem?

M

mr_blond972015-06-12 04:06:30

Computer networks

mr_blond97, 2015-06-12 04:06:30

The ESXi 5.5 hypervisor is installed on the server and several virtual machines are running on it. The provider reports that the server has started sending 630,000 packets per second to the network. This can be caused by hacking, software bugs, or misconfigured IPv6.

The questions are as follows:
1) How to find out which of the machines began to send packets?
2) How to find out what is the reason for sending?

Reply

Answer the question

In order to leave comments, you need to log in

2 answer(s)

V

Vitaly Pukhov, 2015-06-12
@Neuroware

1) How to find out which of the machines began to send packets?
WireShark or disable interfaces one by one on each
2) Check what is wrong with the one that sends

P

Puma Thailand, 2015-06-12
@opium

1) Go to each machine and see the activity on the interfaces, in theory it can even be looked at in esxi itself
2) See what programs the cracker has launched and turn them off