How can I find the resource that owns the unknown IP addresses in my Amazon VPC?

I trying to find the top contributors to traffic through the NAT gateway in my VPC. Therefore I've obtained a IP list through VPC flow logs. (https://aws.amazon.com/premiumsupport/knowledge-center/vpc-find-traffic-sources-nat-gateway/).

However there are some IPs that I can't find either using the network interface console or describe-network-interfaces aws cli command. (https://aws.amazon.com/premiumsupport/knowledge-center/vpc-find-owner-unknown-ip-addresses/)

Is there any other way to find them?

주제

네트워킹 및 콘텐츠 전송 AWS Well-Architected 프레임워크

태그

아마존 VPC 비용 최적화

언어

English

TheWesDias

질문됨 2년 전867회 조회

1개 답변

최신
최다 투표
가장 많은 댓글

이 답변이 도움이 되었나요?커뮤니티가 여러분의 지식을 활용할 수 있도록 정답을 찬성하세요.

These mysterious IPs could be in use by AWS Services. To determine this, you can use custom logging [1] that includes the fields pkt-src-aws-service and pkt-dst-aws-service. If this traffic is going to or from an AWS Service, this should show up clearly in these fields.

[1] https://docs.aws.amazon.com/vpc/latest/userguide/flow-logs.html#flow-logs-custom

전문가

Shlomo Dubrowin

답변함 2년 전

How can I find the resource that owns the unknown IP addresses in my Amazon VPC?

관련 콘텐츠