BLOG

KB No. 2627: IDENTIFYING THE IP ADDRESSES THAT GENERATE THE MOST CONNECTIONS

One of the causes of proxy slowdown is spam generated by one or more IP addresses. Here is a script to run in the command line, which allows you to rank IP addresses by number of connections.

Background

One of the causes of proxy slowdown is spam generated by one or more IP addresses.

For example, if software X on a client workstation does not know how to authenticate itself on a proxy, it will try endlessly to connect to the Internet, generating a considerable number of requests, sometimes at a frenetic pace. This pollution will impact overall network performance.

Here is a script to run in the command line, which allows you to sort IP addresses by number of connections.

Steps

Step 1

  1. Go to the chroot (does not apply to boxes): chroot /opt/olfeo5/chroot
  2. Go to the/rootdirectory: cd /root
  3. Create the script count.py: