突然 网站访问好慢。。。 检查 解决

C:/>tracert -d www.beihai365.com

Tracing route to web1.beihai365.com [222.216.28.18
over a maximum of 30 hops:

  1     *        *        *     Request timed out.
  2     3 ms     1 ms     1 ms  218.65.152.49
  3     5 ms     6 ms     5 ms  218.65.152.9
  4     5 ms     6 ms     5 ms  218.65.136.6
  5    16 ms    19 ms    22 ms  218.65.173.54
  6    12 ms    10 ms    10 ms  222.217.167.174
  7    10 ms    12 ms    10 ms  222.217.167.134
  8     *      902 ms   887 ms  222.216.28.3

 

 

 

看最后一条路由。 知道进入机房网关很慢。。

 

让机房检查了。。机房说 机房木有问题

 

好的。上服务器。 直接就ping 网关和其他 服务器。  ping 网关的时候很慢。 ping 其他服务器没问题

 

 

web1# ping 222.216.28.129
PING 222.216.28.129 (222.216.28.129): 56 data bytes
64 bytes from 222.216.28.129: icmp_seq=0 ttl=255 time=355.228 ms
^C
--- 222.216.28.129 ping statistics ---
2 packets transmitted, 1 packets received, 50.0% packet loss
round-trip min/avg/max/stddev = 355.228/355.228/355.228/0.000 ms

 

web1# ping 222.216.28.130
PING 222.216.28.130 (222.216.28.130): 56 data bytes
64 bytes from 222.216.28.130: icmp_seq=0 ttl=128 time=0.826 ms 

 

 

就可以决定是机房问题了。然后再检查下

 

arp: 222.216.28.134 moved from 00:26:18:d7:de:1c to 00:0f:e2:23:86:31 on em0
arp: 222.216.28.134 moved from 00:0f:e2:23:86:31 to 00:26:18:d7:de:1c on em0
arp: 222.216.28.134 moved from 00:26:18:d7:de:1c to 00:0f:e2:23:86:31 on em0
arp: 222.216.28.134 moved from 00:0f:e2:23:86:31 to 00:26:18:d7:de:1c on em0
arp: 222.216.28.134 moved from 00:26:18:d7:de:1c to 00:0f:e2:23:86:31 on em0
arp: 222.216.28.134 moved from 00:0f:e2:23:86:31 to 00:26:18:d7:de:1c on em0
arp: 222.216.28.134 moved from 00:26:18:d7:de:1c to 00:0f:e2:23:86:31 on em0
arp: 222.216.28.134 moved from 00:0f:e2:23:86:31 to 00:26:18:d7:de:1c on em0

内部网有ARP攻击迹象。

 

。。证据再次。机房无法抵赖了。。。

 

最后经过机房处理。。。一切都好了