Bandwidth Burst Tracking

[Spifft]

Is there a way to find out where a burst of bandwidth usage came from/ went to?

Today my server experienced some lag and I am assuming it came from my game server but am not sure. It was pretty ugly though. Happened multiple times.

I don't believe it was an attack or anything because it was being sent by my vps.
as you can see in the attachment, on the left side is where the abnormalities are.

It just concerns me that it came from the vps and I am really interested in finding out where it went and what it was.

[Spifft]

Oh and I dont have any active stats or anything running. Just a few rcon things that run now and then but thats it.

[Edge100x]

Those aren't very large spikes, and might just indicate a burst of activity in one of your servers. What kind of servers are you running?

[Spifft]

It is a CS:S 40 slot zombie mod server. I have never seen it go that high before and cause such long lag spikes.

[Edge100x]

It's difficult to say what happened from looking at the graph alone. If you're able to catch a spike while it's occurring later, though, you may be able to pull out some useful statistics using a program like Wireshark or TCPdump.

[Spifft]

Ok I will look into those, thanks.