bond 0 and eth0 traffic has increased. Any way to observe what is being transfered?

[leland]

I have Munin installed and while checking the stats I noticed that bond 0 and eth0 traffic when from 1.5kb and -5kb to 9.5kb and -13kb. An increase of 8kb/seconds on both up and down has me a little worried. Is there any way to log the traffic that is going through that port? Thank you.

Running:
WHM 11.36.0 (build 21)
CENTOS 6.3 x86_64 standard

 

[dthigpen]

Sniff the traffic on the utilized interfaces a bit with tshark.

 

[leland]

Thank you. I will try it out.