Strange network traffic at centos 7

Support for security such as Firewalls and securing linux
Post Reply
sajjad13and11
Posts: 14
Joined: 2014/10/03 08:17:41

Strange network traffic at centos 7

Post by sajjad13and11 » 2014/10/06 15:47:10

Hi
I,m using centos 7 at my personal client , when i connect to internet with my wireless network an strange network traffic will be start !
i used system monitor gui to see that and i see an downloading with my whole bandwidth but i don,t downloading anything or i don,t using yum or any update installer to download !!
i don,t install any software that needs to download !
please help me at this topic !

sajjad13and11
Posts: 14
Joined: 2014/10/03 08:17:41

Re: Strange network traffic at centos 7

Post by sajjad13and11 » 2014/10/07 17:40:56

Pleas help me at this case , its important !!
I monitored my network with iptraf-ng and i understood every time when i connecting to internet my client will be connect to a server ! such these :
212.83.32.25
129.143.116.113
198.41.208.107
and every time an other ip address , for now every time i use iptables and iptraf to block ip address and finally when i connect again to internet an other sucks ip address ! :|

sajjad13and11
Posts: 14
Joined: 2014/10/03 08:17:41

Re: Strange network traffic at centos 7

Post by sajjad13and11 » 2014/10/07 17:48:01

now i checked these ip addresses on my internet browser , looks like this is yum repos !
but why the repo servers getting my whole bandwidth at whole day ? !

aks
Posts: 2964
Joined: 2014/09/20 11:22:14

Re: Strange network traffic at centos 7

Post by aks » 2014/10/09 16:05:41

So let me see if I've got you right. You boot up CentOS 7 then connect a wireless device. Once the wireless device is connected you can not surf the web (or access the Internet at all). You've had a look at the traffic coming out of your wireless device and it's all destined to YUM repository(s). Is that right?

Are you sure that the YUM traffic is actually reaching it's detination (do you see traffic coming back)? Also how do you know that all your bandwidth is being used up?

Regards

sajjad13and11
Posts: 14
Joined: 2014/10/03 08:17:41

Re: Strange network traffic at centos 7

Post by sajjad13and11 » 2014/10/11 12:59:46

thanks for reply.
no , i connected to wireless device and i see coming in network traffic with my whole bandwidth
and yeah i checked dest ip address and its right !
then i checked my traffic from my wireless monitoring and seems like 7 GB network traffic used by my client mac address so yeah its reached by yum !
and i know i found the problem !
my automatic problem reporting from selinux show a message like that :
yum process tried to change (update) the selinux and the necessary permissions was not set correctly for update ! , so i set that permission and now my monitoring looks like the problem has been solved !
but i,m not sure because many times the yum traffic starts at 1 or 2 hour later than i connected to the internet.
anyway ! if still the problem will be exist i,ll send an other post at this topic.

Post Reply

Return to “CentOS 7 - Security Support”