Solved

Is broadcast traffic affecting network load on my server ?

Posted on 2004-04-19
5
327 Views
Last Modified: 2010-04-11
Here is the situation :

1. I have a Linux server sitting in IP A

2. After watching the number of incoming traffic into ethernet0 (IP A), I found it's increased about 2 MBytes every 5 minutes.

3. Then I run a network sniffer, and I found 2 IPs ... broadcasting something into a broadcast address and to a multicast address.

My question, is broadcast traffic affecting network load on my server ?
0
Comment
Question by:klompen
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
5 Comments
 
LVL 3

Accepted Solution

by:
shaggyb earned 55 total points
ID: 10864089
well yes..... but the question is does it really affect YOU and the answer is dependant on how many clients you have on the netwrok and how fast the network is.... if you are running a 100Mbit network and you have 2 or 3 boxes on the network then the answer is no its really not

i would be more concerned if there was somthing running that you dont need to have running that was doing the broadcasting like say a worm..... or what not...

i would check to see what processes are running on each box and see what could be sending out the broadcast packets..... it could just be somthing like netbios too
0
 

Author Comment

by:klompen
ID: 10866213
This issue concerns me after I found that the RX counter of my ethernet0, increased about 2 MBytes every 5 minuts.

RX counter = receiving signal

So, why I got this a lot of incoming traffic ?

Then I run a network monitoring, I watched network traffic in eth0 ... saw minimal, definetely not 2 MBytes/5 minutes. Yes, because this server is still new ... have not published to the public.

Then I run a network sniffer ... I saw a lot of UDP traffic, every second destination = 224.2.243.20:36546

It's a multicast address ... every second!

Also this destination = 66.96.215.255:137 , its a broadcast address.

So that's why I asked ... if there are broadcast traffic ... is it normal that my ethernet0 RX counter (receiving signal) increased ? Maybe because the eth0 processed every network packets even if its not directed to it ... ?

This server is located in an ISP ... a lot of servers in the same networks ... I already asked their support, and they say "this is normal"

But for me not, because now my network monitoring graph ... recorded this 2 MBytes incoming traffic / 5 minutes.

0
 
LVL 3

Expert Comment

by:shaggyb
ID: 10866272
0
 
LVL 1

Expert Comment

by:Mike_helps_you
ID: 10866654
On a 100Mbit network you won't notice the difference. Just to be safe though, know what is broadcasting.
0
 
LVL 27

Expert Comment

by:pseudocyber
ID: 10867768
Are you by chance running any NIC teaming?  They will do a lot of multicasting.
0

Featured Post

Space-Age Communications Transitions to DevOps

ViaSat, a global provider of satellite and wireless communications, securely connects businesses, governments, and organizations to the Internet. Learn how ViaSat’s Network Solutions Engineer, drove the transition from a traditional network support to a DevOps-centric model.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

If your business is like most, chances are you still need to maintain a fax infrastructure for your staff. It’s hard to believe that a communication technology that was thriving in the mid-80s could still be an essential part of your team’s modern I…
In this article, I am going to show you how to simulate a multi-site Lab environment on a single Hyper-V host. I use this method successfully in my own lab to simulate three fully routed global AD Sites on a Windows 10 Hyper-V host.
Here's a very brief overview of the methods PRTG Network Monitor (https://www.paessler.com/prtg) offers for monitoring bandwidth, to help you decide which methods you´d like to investigate in more detail.  The methods are covered in more detail in o…
Michael from AdRem Software outlines event notifications and Automatic Corrective Actions in network monitoring. Automatic Corrective Actions are scripts, which can automatically run upon discovery of a certain undesirable condition in your network.…

707 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question