iptraf shows excessively high traffic, switch says almost no traffic

view full story

http://serverfault.com – I have a weird problem with traffic here. My server is connected via 100mbit to a netgear switch. Now sometimes when I look at the traffic on the server using iptraf it reports in excess of 16000kbytes/s, that is 16 MB/s on a 100mbit line. Clearly this can't be right, also the netgear switch can measure and display traffic, and it is reporting much lower traffic volumes, somewhere around 100kbytes/s. After I noticed this I installed nethogs to see which process is sucking up all that bandwidth, but just like the switch, it showed almost no utilization at all. Can anybody explain this behavior (HowTos)