[问题求助]如何查看服务器被攻击？网络堵塞 [复制链接]

以前我的服务器内网收邮件速度很快，占接收 几秒.就完成，现在却要几十秒，外网根本无法连接，.提示服务器繁忙.！但是mail服务器可以正常接收 外域的邮件，vpn也无法连接！！             电子

[quote]原帖由 "q1208c"]tcpdump[/quote 发表：


[root@localhost root]# tcpdump
tcpdump: listening on ppp0
10:39:29.729305 199.232.31.10.http >; 218.17.249.161.1072: P 3426394596:3426394609(13) ack 1062754863 win 65412 (DF)
10:39:29.867811 218.17.249.161.1072 >; 199.232.31.10.http: . ack 13 win 65510 (DF)
10:39:30.260955 218.17.249.161.32768 >; 64.4.25.30.domain:  37094 [1au] A? www.msn.co.jp. (42) (DF)
10:39:30.547226 64.4.25.30.domain >; 218.17.249.161.32768:  37094*- 1/0/1 A 207.46.78.48 (5
10:39:30.559210 218.17.249.161.1050 >; 207.46.78.48.http: S 1171336668:1171336668(0) win 65535 <mss 1460,nop,nop,sackOK>; (DF)
10:39:30.792136 207.46.78.48.http >; 218.17.249.161.1050: S 2876105444:2876105444(0) ack 1171336669 win 16384 <mss 1412,nop,nop,sackOK>;
10:39:30.792553 218.17.249.161.1050 >; 207.46.78.48.http: . ack 1 win 65535 (DF)
10:39:30.793095 218.17.249.161.1050 >; 207.46.78.48.http: P 1:273(272) ack 1 win 65535 (DF)
10:39:31.035116 207.46.78.48.http >; 218.17.249.161.1050: P 1:426(425) ack 273 win 16672 (DF)
10:39:31.057090 218.17.249.161.1050 >; 207.46.78.48.http: P 273:554(281) ack 426 win 65110 (DF)
10:39:31.317730 207.46.78.48.http >; 218.17.249.161.1050: . 426:1838(1412) ack 554 win 16391 (DF)
10:39:31.322888 207.46.78.48.http >; 218.17.249.161.1050: . 1838:3250(1412) ack 554 win 16391 (DF)
10:39:31.328245 207.46.78.48.http >; 218.17.249.161.1050: . 3250:4662(1412) ack 554 win 16391 (DF)
10:39:31.469388 218.17.249.161.1050 >; 207.46.78.48.http: . ack 1838 win 65535 (DF)
10:39:31.712074 207.46.78.48.http >; 218.17.249.161.1050: P 4662:4823(161) ack 554 win 16391 (DF)
10:39:31.712467 218.17.249.161.1050 >; 207.46.78.48.http: . ack 1838 win 65535 <nop,nop,sack sack 1 {4662:4823} >; (DF)
10:39:33.886459 222.36.44.6.http >; 218.17.249.161.33224: F 1922612135:1922612135(0) ack 1077231557 win 32900 <nop,nop,timestamp 267741750 957387>; (DF)
10:39:33.921214 218.17.249.161.33224 >; 222.36.44.6.http: . ack 1 win 6432 <nop,nop,timestamp 958891 267741750>; (DF)
10:39:34.037347 207.46.78.48.http >; 218.17.249.161.1050: . 1838:3250(1412) ack 554 win 16391 (DF)
10:39:34.173023 218.17.249.161.1050 >; 207.46.78.48.http: . ack 3250 win 65535 <nop,nop,sack sack 1 {4662:4823} >; (DF)
10:39:34.406639 207.46.78.48.http >; 218.17.249.161.1050: . 3250:4662(1412) ack 554 win 16391 (DF)
10:39:34.407376 218.17.249.161.1050 >; 207.46.78.48.http: . ack 4823 win 65535 (DF)
10:39:34.407556 207.46.78.48.http >; 218.17.249.161.1050: P 4662:4823(161) ack 554 win 16391 (DF)
10:39:34.407772 218.17.249.161.1050 >; 207.46.78.48.http: . ack 4823 win 65535 (DF)
10:39:34.476741 218.17.249.161.1072 >; 24.99.13.169.http: P 2891835435:2891835557(122) ack 1042973936 win 65454 (DF)
10:39:34.640684 207.46.78.48.http >; 218.17.249.161.1050: . 4823:6235(1412) ack 554 win 16391 (DF)
10:39:34.646054 207.46.78.48.http >; 218.17.249.161.1050: . 6235:7647(1412) ack 554 win 16391 (DF)
10:39:34.653657 218.17.249.161.1050 >; 207.46.78.48.http: . ack 4823 win 65535 <nop,nop,sack sack 1 {6235:7647} >; (DF)
10:39:34.886316 207.46.78.48.http >; 218.17.249.161.1050: . 7647:9059(1412) ack 554 win 16391 (DF)
10:39:34.892823 218.17.249.161.1050 >; 207.46.78.48.http: . ack 4823 win 65535 <nop,nop,sack sack 1 {6235:9059} >; (DF)
10:39:34.902685 24.99.13.169.http >; 218.17.249.161.1072: . ack 122 win 65291 (DF) [tos 0x20]
10:39:35.132659 207.46.78.48.http >; 218.17.249.161.1050: . 4823:6235(1412) ack 554 win 16391 (DF)
10:39:35.133514 218.17.249.161.1050 >; 207.46.78.48.http: . ack 9059 win 65535 (DF)
10:39:35.159133 24.99.13.169.http >; 218.17.249.161.1072: P 1:67(66) ack 122 win 65291 (DF) [tos 0x20]
10:39:35.286623 218.17.249.161.1072 >; 24.99.13.169.http: . ack 67 win 65388 (DF)
10:39:35.377319 207.46.78.48.http >; 218.17.249.161.1050: . 9059:10471(1412) ack 554 win 16391 (DF)
10:39:35.378896 207.46.78.48.http >; 218.17.249.161.1050: P 10471:10796(325) ack 554 win 16391 (DF)
10:39:35.382555 218.17.249.161.1050 >; 207.46.78.48.http: . ack 10796 win 65535 (DF)
10:39:35.633546 207.46.78.48.http >; 218.17.249.161.1050: . 10796:12208(1412) ack 554 win 16391 (DF)
10:39:35.638614 207.46.78.48.http >; 218.17.249.161.1050: . 12208:13620(1412) ack 554 win 16391 (DF)
10:39:35.646120 218.17.249.161.1050 >; 207.46.78.48.http: . ack 13620 win 65535 (DF)
10:39:35.889515 207.46.78.48.http >; 218.17.249.161.1050: . 13620:15032(1412) ack 554 win 16391 (DF)
10:39:35.890346 218.17.249.161.1050 >; 207.46.78.48.http: . ack 15032 win 64123 (DF)
10:39:35.894658 207.46.78.48.http >; 218.17.249.161.1050: . 15032:16444(1412) ack 554 win 16391 (DF)
10:39:36.136376 207.46.78.48.http >; 218.17.249.161.1050: . 16444:17856(1412) ack 554 win 16391 (DF)
10:39:36.139338 207.46.78.48.http >; 218.17.249.161.1050: P 17856:18703(847) ack 554 win 16391 (DF)
10:39:36.142607 218.17.249.161.1050 >; 207.46.78.48.http: . ack 15032 win 64123 <nop,nop,sack sack 1 {16444:17856} >; (DF)
10:39:36.142635 218.17.249.161.1050 >; 207.46.78.48.http: . ack 15032 win 64123 <nop,nop,sack sack 1 {16444:18703} >; (DF)
10:39:36.239455 24.99.13.169.http >; 218.17.249.161.1072: P 1:67(66) ack 122 win 65291 (DF) [tos 0x20]
10:39:36.239664 218.17.249.161.1072 >; 24.99.13.169.http: . ack 67 win 65388 (DF)
10:39:36.420361 207.46.78.48.http >; 218.17.249.161.1050: . 15032:16444(1412) ack 554 win 16391 (DF)
10:39:37.970299 207.46.78.48.http >; 218.17.249.161.1050: . 15032:16444(1412) ack 554 win 16391 (DF)
10:39:37.971091 218.17.249.161.1050 >; 207.46.78.48.http: . ack 18703 win 60452 (DF)
10:39:39.071409 222.36.44.6.http >; 218.17.249.161.33225: F 2695662040:2695662040(0) ack 1080853742 win 32900 <nop,nop,timestamp 267742268 957905>; (DF)
10:39:39.111214 218.17.249.161.33225 >; 222.36.44.6.http: . ack 1 win 6432 <nop,nop,timestamp 959410 267742268>; (DF)
10:39:39.214323 222.36.44.5.http >; 218.17.249.161.33223: F 863534113:863534113(0) ack 1062478054 win 32900 <nop,nop,timestamp 221737184 957917>; (DF)
10:39:39.261223 218.17.249.161.33223 >; 222.36.44.5.http: . ack 1 win 51800 <nop,nop,timestamp 959425 221737184>; (DF)
10:39:42.271501 218.17.249.161.33223 >; 222.36.44.5.http: F 1:1(0) ack 1 win 51800 <nop,nop,timestamp 959726 221737184>; (DF)
10:39:42.271564 218.17.249.161.33224 >; 222.36.44.6.http: F 1:1(0) ack 1 win 6432 <nop,nop,timestamp 959726 267741750>; (DF)
10:39:42.271592 218.17.249.161.33225 >; 222.36.44.6.http: F 1:1(0) ack 1 win 6432 <nop,nop,timestamp 959726 267742268>; (DF)
10:39:42.393944 222.36.44.6.http >; 218.17.249.161.33224: . ack 2 win 32899 <nop,nop,timestamp 267742593 959726>; (DF)
10:39:42.394026 222.36.44.5.http >; 218.17.249.161.33223: . ack 2 win 32899 <nop,nop,timestamp 221737498 959726>; (DF)
10:39:42.394060 222.36.44.6.http >; 218.17.249.161.33225: . ack 2 win 32899 <nop,nop,timestamp 267742594 959726>; (DF)
10:39:42.797456 218.17.249.161.1050 >; 207.46.78.48.http: . ack 18703 win 65148 (DF)
10:39:42.939164 218.17.249.161.1847 >; 202.82.82.19.http: P 1022264915:1022265159(244) ack 606567637 win 15794 (DF)
10:39:42.939247 218.17.249.161.1848 >; 203.155.98.175.http: P 861167569:861167813(244) ack 156005352 win 16568 (DF)
10:39:43.041627 218.17.209.22.8000 >; 218.17.249.161.32774: udp 80 (DF)
10:39:43.064217 218.17.249.161.32774 >; 218.17.209.22.8000: udp 44 (DF)
10:39:43.097358 202.82.82.19.http >; 218.17.249.161.1847: P 1:38(37) ack 244 win 16944 (DF)
10:39:43.098533 218.17.249.161.1847 >; 202.82.82.19.http: P 244:258(14) ack 38 win 15757 (DF)
10:39:43.311450 203.155.98.175.http >; 218.17.249.161.1848: P 1:38(37) ack 244 win 64726 (DF)
10:39:43.311700 218.17.249.161.1848 >; 203.155.98.175.http: P 244:258(14) ack 38 win 16531 (DF)
10:39:43.372670 202.82.82.19.http >; 218.17.249.161.1847: . ack 258 win 16930 (DF)
10:39:43.446649 202.82.82.19.http >; 218.17.249.161.1847: P 38:57(19) ack 258 win 16930 (DF)
10:39:43.447214 218.17.249.161.1847 >; 202.82.82.19.http: P 258:262(4) ack 57 win 15738 (DF)
10:39:43.713166 202.82.82.19.http >; 218.17.249.161.1847: . ack 262 win 16926 (DF)
10:39:43.734702 203.155.98.175.http >; 218.17.249.161.1848: . ack 258 win 64712 (DF)
10:39:44.094840 222.47.183.183.50604 >; 218.17.249.161.1026: udp 326 (DF)
10:39:44.096216 222.47.183.183.50605 >; 218.17.249.161.1027: udp 326 (DF)
10:39:44.166820 218.17.249.161.1047 >; 61.144.238.134.http: P 1283076003:1283076033(30) ack 52446484 win 65067 (DF)
10:39:44.269434 61.144.238.134.http >; 218.17.249.161.1047: . ack 30 win 1400
10:39:44.269531 61.144.238.134.http >; 218.17.249.161.1047: P 1:27(26) ack 30 win 1400
10:39:44.419770 203.155.98.175.http >; 218.17.249.161.1848: P 38:57(19) ack 258 win 64712 (DF)
10:39:44.420114 218.17.249.161.1848 >; 203.155.98.175.http: P 258:262(4) ack 57 win 16512 (DF)
10:39:44.446812 218.17.249.161.1047 >; 61.144.238.134.http: . ack 27 win 65041 (DF)
10:39:44.491822 218.17.249.161.1072 >; 24.99.13.169.http: P 122:138(16) ack 67 win 65388 (DF)
10:39:44.756505 218.17.249.161.1051 >; 207.46.78.12.http: S 1540468177:1540468177(0) win 65535 <mss 1460,nop,nop,sackOK>; (DF)
10:39:44.793638 24.99.13.169.http >; 218.17.249.161.1072: P 67:127(60) ack 138 win 65275 (DF) [tos 0x20]
10:39:44.794302 218.17.249.161.1072 >; 24.99.13.169.http: P 138:212(74) ack 127 win 65328 (DF)
10:39:44.816090 203.155.98.175.http >; 218.17.249.161.1848: . ack 262 win 64708 (DF)
10:39:44.999766 207.46.78.12.http >; 218.17.249.161.1051: S 3509285523:3509285523(0) ack 1540468178 win 16384 <mss 1412,nop,nop,sackOK>;
10:39:45.001971 218.17.249.161.1051 >; 207.46.78.12.http: . ack 1 win 65535 (DF)
10:39:45.002635 218.17.249.161.1051 >; 207.46.78.12.http: P 1:400(399) ack 1 win 65535 (DF)
10:39:45.247812 207.46.78.12.http >; 218.17.249.161.1051: FP 1:385(384) ack 400 win 16545 (DF)
10:39:45.254818 218.17.249.161.1051 >; 207.46.78.12.http: . ack 386 win 65151 (DF)
10:39:45.255864 218.17.249.161.1051 >; 207.46.78.12.http: F 400:400(0) ack 386 win 65151 (DF)
10:39:45.488675 207.46.78.12.http >; 218.17.249.161.1051: . ack 401 win 16545 (DF)
10:39:45.563672 218.17.249.161.32768 >; 64.4.25.30.domain:  58493 [1au] A? sc.msn.co.jp. (41) (DF)
10:39:45.786010 218.17.249.161.1072 >; 24.99.13.169.http: P 138:212(74) ack 127 win 65328 (DF)
10:39:45.846136 64.4.25.30.domain >; 218.17.249.161.32768:  58493*- 1/0/1 A 207.46.78.41 (57)
10:39:45.852172 218.17.249.161.1052 >; 207.46.78.41.http: S 370678821:370678821(0) win 65535 <mss 1460,nop,nop,sackOK>; (DF)
10:39:45.857333 218.17.249.161.1053 >; 207.46.78.41.http: S 800127349:800127349(0) win 65535 <mss 1460,nop,nop,sackOK>; (DF)
10:39:45.872827 218.17.249.161.1054 >; 207.46.78.41.http: S 487311716:487311716(0) win 65535 <mss 1460,nop,nop,sackOK>; (DF)
10:39:45.874663 218.17.249.161.32768 >; 207.46.138.20.domain:  3658 [1au] A? rad.msn.com. (40) (DF)
10:39:45.875584 218.17.249.161.1055 >; 207.46.78.41.http: S 831636201:831636201(0) win 65535 <mss 1460,nop,nop,sackOK>; (DF)
10:39:46.074783 207.46.78.41.http >; 218.17.249.161.1052: S 2800455460:2800455460(0) ack 370678822 win 16384 <mss 1412,nop,nop,sackOK>;
10:39:46.078822 218.17.249.161.1052 >; 207.46.78.41.http: . ack 1 win 65535 (DF)
10:39:46.079741 218.17.249.161.1052 >; 207.46.78.41.http: P 1:341(340) ack 1 win 65535 (DF)
10:39:46.081130 207.46.78.41.http >; 218.17.249.161.1053: S 2986058425:2986058425(0) ack 800127350 win 16384 <mss 1412,nop,nop,sackOK>;
10:39:46.089685 218.17.249.161.1053 >; 207.46.78.41.http: . ack 1 win 65535 (DF)
10:39:46.090570 218.17.249.161.1053 >; 207.46.78.41.http: P 1:342(341) ack 1 win 65535 (DF)
10:39:46.097628 207.46.78.41.http >; 218.17.249.161.1054: S 3490144526:3490144526(0) ack 487311717 win 16384 <mss 1412,nop,nop,sackOK>;
10:39:46.100223 218.17.249.161.1054 >; 207.46.78.41.http: . ack 1 win 65535 (DF)
10:39:46.100970 218.17.249.161.1054 >; 207.46.78.41.http: P 1:341(340) ack 1 win 65535 (DF)
10:39:46.101405 207.46.78.41.http >; 218.17.249.161.1055: S 3255776153:3255776153(0) ack 831636202 win 16384 <mss 1412,nop,nop,sackOK>;
10:39:46.101724 218.17.249.161.1055 >; 207.46.78.41.http: . ack 1 win 65535 (DF)
10:39:46.102379 218.17.249.161.1055 >; 207.46.78.41.http: P 1:342(341) ack 1 win 65535 (DF)
10:39:46.157562 24.99.13.169.http >; 218.17.249.161.1072: P 127:139(12) ack 212 win 65201 (DF) [tos 0x20]
10:39:46.186241 207.46.138.20.domain >; 218.17.249.161.32768:  3658*- 1/0/1 CNAME[|domain]
10:39:46.187299 218.17.249.161.32768 >; 210.158.219.47.domain:  34597 [1au] A? rad.msn.com.nsatc.net. (50) (DF)
10:39:46.269421 210.158.219.47.domain >; 218.17.249.161.32768:  34597*- 3/4/4 A[|domain]
10:39:46.319574 207.46.78.41.http >; 218.17.249.161.1052: . 1:1413(1412) ack 341 win 65195 (DF)
10:39:46.322801 207.46.78.41.http >; 218.17.249.161.1052: P 1413:2362(949) ack 341 win 65195 (DF)
10:39:46.323475 218.17.249.161.1052 >; 207.46.78.41.http: . ack 1 win 65535 <nop,nop,sack sack 1 {1413:2362} >; (DF)
10:39:46.331066 207.46.78.41.http >; 218.17.249.161.1053: . 1:1413(1412) ack 342 win 65194 (DF)
10:39:46.332763 218.17.249.161.1072 >; 24.99.13.169.http: . ack 139 win 65316 (DF)
10:39:46.336201 207.46.78.41.http >; 218.17.249.161.1053: . 1413:2825(1412) ack 342 win 65194 (DF)
10:39:46.336878 218.17.249.161.1053 >; 207.46.78.41.http: . ack 2825 win 65535 (DF)
10:39:46.341672 207.46.78.41.http >; 218.17.249.161.1054: . 1:1413(1412) ack 341 win 65195 (DF)
10:39:46.347295 207.46.78.41.http >; 218.17.249.161.1054: . 1413:2825(1412) ack 341 win 65195 (DF)
10:39:46.347951 218.17.249.161.1054 >; 207.46.78.41.http: . ack 1 win 65535 <nop,nop,sack sack 1 {1413:2825} >; (DF)
10:39:46.352571 207.46.78.41.http >; 218.17.249.161.1055: . 1:1413(1412) ack 342 win 65194 (DF)
10:39:46.359161 207.46.78.41.http >; 218.17.249.161.1055: . 1413:2825(1412) ack 342 win 65194 (DF)
10:39:46.498993 218.17.249.161.1055 >; 207.46.78.41.http: . ack 1413 win 65535 (DF)
10:39:46.558318 218.17.249.161.32768 >; 210.158.219.50.domain:  11339 A? global.msads.net. (34) (DF)
10:39:46.572559 207.46.78.41.http >; 218.17.249.161.1053: . 2825:4237(1412) ack 342 win 65194 (DF)
10:39:46.575221 207.46.78.41.http >; 218.17.249.161.1053: P 4237:4934(697) ack 342 win 65194 (DF)
10:39:46.575795 218.17.249.161.1053 >; 207.46.78.41.http: . ack 2825 win 65535 <nop,nop,sack sack 1 {4237:4934} >; (DF)
10:39:46.580253 207.46.78.41.http >; 218.17.249.161.1054: P 2825:3377(552) ack 341 win 65195 (DF)
10:39:46.580759 218.17.249.161.1054 >; 207.46.78.41.http: . ack 1 win 65535 <nop,nop,sack sack 1 {1413:3377} >; (DF)
10:39:46.737044 207.46.78.41.http >; 218.17.249.161.1055: . 2825:4237(1412) ack 342 win 65194 (DF)
10:39:46.737290 207.46.78.41.http >; 218.17.249.161.1055: P 4237:4415(17 ack 342 win 65194 (DF)
10:39:46.743008 218.17.249.161.1055 >; 207.46.78.41.http: . ack 1413 win 65535 <nop,nop,sack sack 1 {4237:4415} >; (DF)
10:39:46.781671 210.158.219.50.domain >; 218.17.249.161.32768:  11339*- 1/9/9 A 211.155.228.30 (369)
10:39:46.784957 218.17.249.161.1057 >; 211.155.228.30.http: S 3485953920:3485953920(0) win 65535 <mss 1460,nop,nop,sackOK>; (DF)
10:39:46.813514 207.46.78.41.http >; 218.17.249.161.1054: . 1:1413(1412) ack 341 win 65195 (DF)
10:39:46.814351 218.17.249.161.1054 >; 207.46.78.41.http: . ack 3377 win 65535 (DF)
10:39:46.833565 211.155.228.30.http >; 218.17.249.161.1057: S 598205093:598205093(0) ack 3485953921 win 33888 <nop,nop,sackOK,mss 1412>;
10:39:46.834012 218.17.249.161.1057 >; 211.155.228.30.http: . ack 1 win 65535 (DF)
10:39:46.908975 218.17.249.161.1058 >; 207.68.178.61.http: S 2327413595:2327413595(0) win 65535 <mss 1460,nop,nop,sackOK>; (DF)
10:39:46.952698 218.17.249.161.1057 >; 211.155.228.30.http: P 1:440(439) ack 1 win 65535 (DF)
10:39:47.006513 211.155.228.30.http >; 218.17.249.161.1057: . ack 440 win 33888
10:39:47.013789 211.155.228.30.http >; 218.17.249.161.1057: . 1:1413(1412) ack 440 win 33888
10:39:47.015392 211.155.228.30.http >; 218.17.249.161.1057: P 1413:1841(42 ack 440 win 33888
10:39:47.020868 211.155.228.30.http >; 218.17.249.161.1057: . 1841:3253(1412) ack 440 win 33888
10:39:47.021588 218.17.249.161.1057 >; 211.155.228.30.http: . ack 1413 win 65535 <nop,nop,sack sack 1 {1841:3253} >; (DF)
10:39:47.077106 211.155.228.30.http >; 218.17.249.161.1057: . 3253:4665(1412) ack 440 win 33888
10:39:47.077932 218.17.249.161.1057 >; 211.155.228.30.http: . ack 1413 win 65535 <nop,nop,sack sack 1 {1841:4665} >; (DF)
10:39:47.080040 211.155.228.30.http >; 218.17.249.161.1057: . 4665:5937(1272) ack 440 win 33888
10:39:47.080739 218.17.249.161.1057 >; 211.155.228.30.http: . ack 1413 win 65535 <nop,nop,sack sack 1 {1841:5937} >; (DF)
10:39:47.318815 218.17.249.161.1054 >; 207.46.78.41.http: P 341:681(340) ack 3377 win 65535 (DF)
10:39:47.557333 207.46.78.41.http >; 218.17.249.161.1054: . 3377:4789(1412) ack 681 win 64855 (DF)
10:39:47.562368 207.46.78.41.http >; 218.17.249.161.1054: . 4789:6201(1412) ack 681 win 64855 (DF)
10:39:47.563078 218.17.249.161.1054 >; 207.46.78.41.http: . ack 6201 win 65535 (DF)
10:39:47.660382 218.17.249.161.1059 >; 207.68.178.61.http: S 313396173:313396173(0) win 65535 <mss 1460,nop,nop,sackOK>; (DF)
10:39:47.797519 207.46.78.41.http >; 218.17.249.161.1054: . 6201:7613(1412) ack 681 win 64855 (DF)
10:39:47.802580 207.46.78.41.http >; 218.17.249.161.1054: . 7613:9025(1412) ack 681 win 64855 (DF)
10:39:47.803297 218.17.249.161.1054 >; 207.46.78.41.http: . ack 6201 win 65535 <nop,nop,sack sack 1 {7613:9025} >; (DF)
10:39:47.968556 207.68.178.61.http >; 218.17.249.161.1059: S 3937300785:3937300785(0) ack 313396174 win 8190 <mss 1412>;
10:39:48.036920 207.46.78.41.http >; 218.17.249.161.1054: . 9025:10437(1412) ack 681 win 64855 (DF)
10:39:48.082623 24.99.13.169.http >; 218.17.249.161.1072: P 127:139(12) ack 212 win 65201 (DF) [tos 0x20]
10:39:48.082804 218.17.249.161.1072 >; 24.99.13.169.http: . ack 139 win 65316 (DF)
10:39:48.383060 211.155.228.30.http >; 218.17.249.161.1057: . 1413:2825(1412) ack 440 win 33888
10:39:48.383972 218.17.249.161.1057 >; 211.155.228.30.http: . ack 5937 win 65535 (DF)
10:39:48.437265 211.155.228.30.http >; 218.17.249.161.1057: . 5937:7349(1412) ack 440 win 33888
10:39:48.442392 211.155.228.30.http >; 218.17.249.161.1057: . 7349:8761(1412) ack 440 win 33888
10:39:48.443172 218.17.249.161.1057 >; 211.155.228.30.http: . ack 8761 win 65535 (DF)
10:39:48.496855 211.155.228.30.http >; 218.17.249.161.1057: . 8761:10033(1272) ack 440 win 33888
10:39:48.497691 218.17.249.161.1057 >; 211.155.228.30.http: . ack 10033 win 64263 (DF)
10:39:48.502262 211.155.228.30.http >; 218.17.249.161.1057: . 10033:11445(1412) ack 440 win 33888
10:39:48.507391 211.155.228.30.http >; 218.17.249.161.1057: . 11445:12857(1412) ack 440 win 33888
10:39:48.508073 218.17.249.161.1057 >; 211.155.228.30.http: . ack 12857 win 65535 (DF)
10:39:48.550789 211.155.228.30.http >; 218.17.249.161.1057: . 12857:14129(1272) ack 440 win 33888
10:39:48.563286 211.155.228.30.http >; 218.17.249.161.1057: . 14129:15541(1412) ack 440 win 33888
10:39:48.564054 218.17.249.161.1057 >; 211.155.228.30.http: . ack 12857 win 65535 <nop,nop,sack sack 1 {14129:15541} >; (DF)
10:39:48.566534 211.155.228.30.http >; 218.17.249.161.1057: . 15541:16953(1412) ack 440 win 33888
10:39:48.567092 218.17.249.161.1057 >; 211.155.228.30.http: . ack 12857 win 65535 <nop,nop,sack sack 1 {14129:16953} >; (DF)
10:39:49.017199 207.46.78.41.http >; 218.17.249.161.1053: . 2825:4237(1412) ack 342 win 65194 (DF)
10:39:49.331312 207.46.78.41.http >; 218.17.249.161.1052: . 1:1413(1412) ack 341 win 65195 (DF)
10:39:49.332191 218.17.249.161.1052 >; 207.46.78.41.http: . ack 2362 win 65535 (DF)
10:39:49.515867 207.46.78.41.http >; 218.17.249.161.1055: . 1413:2825(1412) ack 342 win 65194 (DF)
10:39:49.903506 218.17.249.161.1058 >; 207.68.178.61.http: S 2327413595:2327413595(0) win 65535 <mss 1460,nop,nop,sackOK>; (DF)
10:39:50.053209 211.155.228.30.http >; 218.17.249.161.1057: . 12857:14269(1412) ack 440 win 33888
10:39:50.054115 218.17.249.161.1057 >; 211.155.228.30.http: . ack 16953 win 65535 (DF)
10:39:50.108234 211.155.228.30.http >; 218.17.249.161.1057: . 16953:18225(1272) ack 440 win 33888
10:39:50.112729 211.155.228.30.http >; 218.17.249.161.1057: . 18225:19637(1412) ack 440 win 33888
10:39:50.113516 218.17.249.161.1057 >; 211.155.228.30.http: . ack 19637 win 65535 (DF)
10:39:50.171771 211.155.228.30.http >; 218.17.249.161.1057: FP 19637:20456(819) ack 440 win 33888
10:39:50.172692 218.17.249.161.1057 >; 211.155.228.30.http: . ack 20457 win 64716 (DF)
10:39:50.174032 218.17.249.161.1057 >; 211.155.228.30.http: F 440:440(0) ack 20457 win 64716 (DF)
10:39:50.221538 211.155.228.30.http >; 218.17.249.161.1057: . ack 441 win 33888
10:39:50.369510 207.46.78.41.http >; 218.17.249.161.1054: . 6201:7613(1412) ack 681 win 64855 (DF)
10:39:50.370368 218.17.249.161.1054 >; 207.46.78.41.http: . ack 9025 win 65535 (DF)
10:39:50.605707 218.17.249.161.1059 >; 207.68.178.61.http: S 313396173:313396173(0) win 65535 <mss 1460,nop,nop,sackOK>; (DF)
10:39:50.605863 207.46.78.41.http >; 218.17.249.161.1054: . 9025:10437(1412) ack 681 win 64855 (DF)
10:39:50.606391 207.46.78.41.http >; 218.17.249.161.1054: P 10437:10617(180) ack 681 win 64855 (DF)
10:39:50.606541 218.17.249.161.1054 >; 207.46.78.41.http: . ack 10437 win 65535 (DF)
10:39:50.806312 218.17.249.161.1054 >; 207.46.78.41.http: . ack 10617 win 65355 (DF)
10:39:50.905468 207.68.178.61.http >; 218.17.249.161.1059: S 3937300785:3937300785(0) ack 313396174 win 8190 <mss 1412>;
10:39:50.905922 218.17.249.161.1059 >; 207.68.178.61.http: . ack 1 win 65535 (DF)
10:39:50.906674 218.17.249.161.1059 >; 207.68.178.61.http: P 1:389(38 ack 1 win 65535 (DF)
10:39:51.215676 207.68.178.61.http >; 218.17.249.161.1059: P 1:322(321) ack 389 win 16529 (DF)
10:39:51.408177 218.17.249.161.1059 >; 207.68.178.61.http: . ack 322 win 65214 (DF)
10:39:51.902061 218.17.249.161.1070 >; 219.185.176.37.http: P 2940014181:2940014255(74) ack 606006794 win 64238 (DF)
10:39:52.169685 219.185.176.37.http >; 218.17.249.161.1070: . ack 74 win 65279 (DF)
10:39:52.283894 219.185.176.37.http >; 218.17.249.161.1070: P 1:13(12) ack 74 win 65279 (DF)
10:39:52.400141 218.17.249.161.1070 >; 219.185.176.37.http: . ack 13 win 64226 (DF)
10:39:53.784757 128.110.240.37.http >; 218.17.249.161.1129: P 892067022:892067250(22 ack 1613448232 win 64719 (DF)
10:39:53.785261 218.17.249.161.1129 >; 128.110.240.37.http: P 1:5(4) ack 228 win 16944 (DF)
10:39:54.265979 207.46.78.41.http >; 218.17.249.161.1053: . 2825:4237(1412) ack 342 win 65194 (DF)
10:39:54.267512 128.110.240.37.http >; 218.17.249.161.1129: . ack 5 win 64715 (DF)
10:39:54.268590 218.17.249.161.1053 >; 207.46.78.41.http: . ack 4934 win 65535 (DF)

如果我要查内网的攻击呢？因为我现在内网收邮件也严重慢！

介不全是 http 么 ?

是不是哪个人在下什么东西呀?

QUOTE:原帖由 "q1208c" 发表：
介不全是 http 么 ?

是不是哪个人在下什么东西呀?



谢谢兄弟 了！应该不是！内网的攻击怎么查看！因为我找到了一个原因，我在我的内网我又搭了一个mail服务器，速度很快，接收 几秒就完成！但现在192.168.0.1的服务器就不行，要三十多秒，外网根本无法连进来，提示服务器繁忙 ！

我用iptraf也发现外网有110端口进来 ，也有数据进来，但这到底是那里来的数据？？？？

QUOTE:原帖由 "枫影谁用了" 发表：



谢谢兄弟 了！应该不是！内网的攻击怎么查看！因为我找到了一个原因，我在我的内网我又搭了一个mail服务器，速度很快，接收 几秒就完成！但现在192.168.0.1的服务器就不行，要三十多秒，外网根本无法连进来，提..........


192.168.0.1 除了 mail 以外还是什么别的 server 么?

QUOTE:原帖由 "q1208c" 发表：


192.168.0.1 除了 mail 以外还是什么别的 server 么?



目前没有了！以前有http，我现在关了！有vpn，我关了！有samba，没关！dns,dhcp

QUOTE:原帖由 "枫影谁用了" 发表：



目前没有了！以前有http，我现在关了！有vpn，我关了！有samba，没关！dns,dhcp


看看 server load

再看一下是不是samba 的事.