Extremely High Outbound Traffic

[[email protected]]

I've done some reaserch on the forums and have done some googling and can't seem to get to the bottom of my issue.  My unraid server continously has outbound traffic in the 600-700 Mbps range which seems insane to me.  The CPU usage sits in the up 80's - min 90's.  Can anyone point me at some potential troubleshooting that I may not have thought of?

 

Attached are the diasgnostic logs

 

tower-diagnostics-20200527-1109.zip

 

Edited May 27, 2020 by [email protected]
formatting

[trurl]

Lots of this in your syslog

May 27 04:44:40 Tower rpcbind[24573]: connect from 192.168.1.68 to getport/addr(mountd)
May 27 04:44:51 Tower rpcbind[24608]: connect from 192.168.1.68 to getport/addr(mountd)
May 27 04:44:51 Tower rpcbind[24609]: connect from 192.168.1.68 to getport/addr(mountd)

Something else on your LAN, you tell us what it means.

[[email protected]]

This is a proxmox server.  It's hosting the usual suite of arrs with a nfs mount to the unraid server

[JonathanM]

4 hours ago, [email protected] said:

This is a proxmox server.  It's hosting the usual suite of arrs with a nfs mount to the unraid server

Does the Unraid activity stop if you disconnect it?

[[email protected]]

So I did some reboots of different machines, to see if there is a difference. Seems the rebotting the Proxmox server 192.168.1.68 didnt change anything, But a reboot of my plex server 192.168.1.10, did mitigate the problem for now.  I think. Has anyone had similar problems recently?

[trurl]

Was your plex server streaming media from your unraid server?

[[email protected]]

Not at that time, the new detect intro feature was running, but my gut tells me that's not the problem. 

[trurl]

12 hours ago, [email protected] said:

Not at that time, the new detect intro feature was running, but my gut tells me that's not the problem. 

Why does your gut tell you that? Seems from the description that a lot of data could travel over the network as it analyzes the shows when the media has to be accessed over the network instead of local to the plex server.

Quote

How to Analyze TV Shows to Find Intros

When enabled, your Plex Media Server will analyze the beginning of each episode, looking for segments that match between the episodes. This is primarily done by analyzing the audio of the file, which would find a common theme song, for instance. Matching is done per season, as many shows have a different intro segment for each season.

 

 

[[email protected]]

I've waited untill the "analyze intros" stopped running and am still experienceing the same weird almost Gbps outbound traffic from the sever.  I've also attached the diagnostics from this moment as well. I've persued the logs, but I really don't know what I'm looking for.  Any Ideas on troubleshooting tips?  

 

tower-diagnostics-20200602-1013.zip

[trurl]

On 5/27/2020 at 11:18 AM, trurl said:

Lots of this in your syslog

May 27 04:44:40 Tower rpcbind[24573]: connect from 192.168.1.68 to getport/addr(mountd)
May 27 04:44:51 Tower rpcbind[24608]: connect from 192.168.1.68 to getport/addr(mountd)
May 27 04:44:51 Tower rpcbind[24609]: connect from 192.168.1.68 to getport/addr(mountd)

Something else on your LAN, you tell us what it means.

Still these filling your logs.

 

Does the traffic go away if you make this stop?

 

Does the traffic go away if you stop plex?

[[email protected]]

Whats strange is that the server in question 192.168.1.68 is currently off, and has been since this morning. 

 

I have this rule set for all of my shares:

192.168.1.0/24(sec=sys,rw,no_root_squash,insecure)

 

could unraid be "caching" a connection and is just firing off connection requests?

[trurl]

3 hours ago, [email protected] said:

Whats strange is that the server in question 192.168.1.68 is currently off, and has been since this morning. 

The last contents of your syslog in those diagnostics was this:

Jun  2 07:13:19 Tower rpcbind[4721]: connect from 192.168.1.68 to getport/addr(mountd)
Jun  2 07:13:19 Tower rpcbind[4726]: connect from 192.168.1.68 to getport/addr(mountd)
Jun  2 07:13:19 Tower rpcbind[4731]: connect from 192.168.1.68 to getport/addr(mountd)

So that might correspond to when the last time the server was up.

 

4 hours ago, trurl said:

Does the traffic go away if you stop plex?

 

[Tolete]

I'm having very similar issue. In my case it looks like its related some how to delugevpn. I have noticed the high (inbound/outbound) Traffic seems to stop/normalize when I stop delugevpn or when If pause downloads.

Edited February 21, 2021 by Tolete