For reasons I've yet to fully figure out, the
network throughput on my personal primary server suddenly jumped 8fold this morning.
I'm fiddling through a few tricks to try and work out why, but I'm completely zoned out today. Does anyone have any suggestions on how to figure out the source / port / app causing this leap?
Upd
According to tethereal, the traffic is almost entirely comprised of DNS AAAA requests for ns.dnseu.com ns3.dnseu.com ns2.dnseu.com (which have bugger-all to do with me) from:
heifong:/home2/wechsler# host 12.170.116.67
Name: pita67.mercurylink.net
Address: 12.170.116.67
heifong:/home2/wechsler# host 12.170.116.66
Name: pita66.mercurylink.net
Address: 12.170.116.66
heifong:/home2/wechsler# host 12.166.51.68
12.166.51.68 PTR record not found, server failure