Skip to main content

You are not logged in. Your edit will be placed in a queue until it is peer reviewed.

We welcome edits that make the post easier to understand and more valuable for readers. Because community members review edits, please try to make the post substantially better than how you found it, for example, by fixing grammar or adding additional resources and hyperlinks.

5
  • I guessed that it was caused by some rogue programs, so I used nethogs to find their information. Then, I could clean them manually. Unluckily, I haven't gotten any useful information, e.g. PID. Could you give me some advice to catch the rogue programs? Thanks a lot!
    – Bei Chen
    Commented Feb 8, 2015 at 3:02
  • nethogs is a convenient tool that will show you the traffic in real time by process id. Why isn't it working for you? How did you determine that there was a traffic spike if you can't see it with nethogs?
    – Ricardo
    Commented Feb 8, 2015 at 4:11
  • There are hundreds of 0.186KB/sec under SENT label as I described above. And the "System Monitor" also provided the running-time data traffic information (Sending > 10MiB/s).
    – Bei Chen
    Commented Feb 8, 2015 at 5:50
  • you could run a #netstat -atpn and it would show you on the last column the name of the program if the connection is established. If you see hundreds of lines with port 80 either as source or destination then start by shutting down the httpd service and see if that helps.
    – Ricardo
    Commented Feb 8, 2015 at 14:17
  • I updated my answer above with the netstat command info.
    – Ricardo
    Commented Feb 8, 2015 at 14:53