my ESXI has a weird traffic.
I’m using a DELL R610 server since 3 years ago, installed ESXI 4.1 on it.
since 10 days ago, my website are very slow. even can not SSH to server.
ISP telling me i have a very high traffic, also gave me a PRTG traffic graph.
i can see the traffic increased to 80Mbps.
in the vSphere client, i can see the same chart in Networking monitor chart, but with different traffic number.
i tried stop all virtual machines, but the traffic still there, until stop the whole machine.
so i can sure the big traffic comes from ESXi.
i also tried “ esxcli network connection list”, but no traffic in the list.
~ # esxcli network connection list
Proto Recv-Q Send-Q Local Address Foreign Address State World ID
tcp 0 0 127.0.0.1:8307 127.0.0.1:51158 ESTABLISHED 6867
tcp 0 0 127.0.0.1:51158 127.0.0.1:8307 ESTABLISHED 4975
tcp 0 0 127.0.0.1:80 127.0.0.1:56876 ESTABLISHED 5173
tcp 0 0 127.0.0.1:56876 127.0.0.1:80 ESTABLISHED 7274
tcp 0 0 127.0.0.1:5988 127.0.0.1:53450 FIN_WAIT_2 0
tcp 0 0 127.0.0.1:53450 127.0.0.1:5988 CLOSE_WAIT 6866
tcp 0 0 127.0.0.1:8307 127.0.0.1:49668 ESTABLISHED 6869
tcp 0 0 127.0.0.1:49668 127.0.0.1:8307 ESTABLISHED 6868
tcp 0 0 210.14.146.103:443 111.197.4.233:1782 ESTABLISHED 6863
tcp 0 0 127.0.0.1:8307 127.0.0.1:50139 ESTABLISHED 6862
tcp 0 0 127.0.0.1:50139 127.0.0.1:8307 ESTABLISHED 6868
tcp 0 0 210.14.146.103:443 111.197.4.233:1781 ESTABLISHED 6866
tcp 0 0 210.14.146.103:22 111.197.4.233:65279 ESTABLISHED 0
tcp 0 0 127.0.0.1:49337 127.0.0.1:80 TIME_WAIT 0
tcp 0 0 127.0.0.1:8307 127.0.0.1:56440 ESTABLISHED 4975
tcp 0 0 127.0.0.1:56440 127.0.0.1:8307 ESTABLISHED 6866
tcp 0 0 210.14.146.103:443 111.197.4.233:1772 ESTABLISHED 6868
tcp 0 0 127.0.0.1:8307 127.0.0.1:51851 ESTABLISHED 5113
tcp 0 0 127.0.0.1:51851 127.0.0.1:8307 ESTABLISHED 4975
tcp 0 0 210.14.146.103:443 111.197.4.233:1534 ESTABLISHED 5113
tcp 0 0 127.0.0.1:8309 127.0.0.1:52658 ESTABLISHED 4975
tcp 0 0 127.0.0.1:52658 127.0.0.1:8309 ESTABLISHED 6865
tcp 0 0 210.14.146.103:443 111.197.4.233:1276 ESTABLISHED 4975
tcp 0 0 127.0.0.1:8307 127.0.0.1:58799 ESTABLISHED 6865
tcp 0 0 127.0.0.1:58799 127.0.0.1:8307 ESTABLISHED 5116
tcp 0 0 127.0.0.1:80 127.0.0.1:57523 ESTABLISHED 6862
tcp 0 0 127.0.0.1:57523 127.0.0.1:80 ESTABLISHED 7263
tcp 0 0 ::1:8307 :::0 LISTEN 4975
tcp 0 0 127.0.0.1:8307 0.0.0.0:0 LISTEN 4975
tcp 0 0 ::1:8309 :::0 LISTEN 4975
tcp 0 0 127.0.0.1:8309 0.0.0.0:0 LISTEN 4975
tcp 0 0 127.0.0.1:5988 0.0.0.0:0 LISTEN 0
tcp 0 0 :::5989 :::0 LISTEN 0
tcp 0 0 127.0.0.1:8889 0.0.0.0:0 LISTEN 5297
tcp 0 0 0.0.0.0:80 0.0.0.0:0 LISTEN 4975
tcp 0 0 :::80 :::0 LISTEN 4975
tcp 0 0 0.0.0.0:443 0.0.0.0:0 LISTEN 4975
tcp 0 0 :::443 :::0 LISTEN 4975
tcp 0 0 ::1:12001 :::0 LISTEN 4975
tcp 0 0 127.0.0.1:12001 0.0.0.0:0 LISTEN 4975
tcp 0 0 210.14.146.103:427 0.0.0.0:0 LISTEN 0
tcp 0 0 127.0.0.1:427 0.0.0.0:0 LISTEN 0
tcp 0 0 :::902 :::0 LISTEN 0
tcp 0 0 0.0.0.0:902 0.0.0.0:0 LISTEN 0
tcp 0 0 :::22 :::0 LISTEN 0
tcp 0 0 0.0.0.0:22 0.0.0.0:0 LISTEN 0
tcp 0 0 :::8000 :::0 LISTEN 4841
tcp 0 0 0.0.0.0:8100 0.0.0.0:0 LISTEN 4835
udp 0 0 210.14.146.103:427 0.0.0.0:0 0
udp 0 0 0.0.0.0:427 0.0.0.0:0 0
udp 0 0 fe80:2::16fe:b5ff:feda:a914:123 :::0 4956
udp 0 0 fe80:1::1:123 :::0 4956
udp 0 0 ::1:123 :::0 4956
udp 0 0 210.14.146.103:123 0.0.0.0:0 4956
udp 0 0 127.0.0.1:123 0.0.0.0:0 4956
udp 0 0 :::123 :::0 4956
udp 0 0 0.0.0.0:123 0.0.0.0:0 4956
udp 0 0 0.0.0.0:8200 0.0.0.0:0 4835
udp 0 0 0.0.0.0:8301 0.0.0.0:0 4724
udp 0 0 0.0.0.0:8302 0.0.0.0:0 4724
that’s really weird.
is there any idea for this ?
