Measuring http server connections
We are having a strange issue with one site we host.In the peak time - 7-10 PM their auction script is measuring 180-370 concurrent users online. Our VPS loads dance between 2 and 5.
However, this site is generating cca. 600 uniques per day, and if I do netstat during those many connections, I get 30-40 users at most.
Error logs show nothing out of the ordinary.
So my presumption is someone is trying to burden the server intentionally during their peak hours (competition or something).
Since this is VPS (we are in process of moving to ded box), I have limited options of installing apps that would drop connections or write to firewall (no APF possible, only limited set of iptables instructions).
Is there any network monitoring tool we can use to log and monitor http user connections per website, bandwidth and data transfers per IP so we can try to pinpoint the problem and (somehow) eliminate it?