[7.190] Strange Up-2-Date Traffic [NOT A BUG]

Hello,

in the beta I started to receive daily executive reports showing 'abnormal' traffic initiated by the gateway directed to the server in a verio.net domain. Which is one of the up-2-date servers (at least as it seems).

Problem is that the gateway reports that the traffic transfered daily between the gateway and the up-2-date server is 130-200MB!!

We are testing the beta on several gateways but only one of them has this problem...

MB

$_alex\$

0 _alex\ over 17 years ago

hey

could you do a audld.plx --level D --drynryn and post the whole output here?

/alex
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 MBirdCZ over 17 years ago in reply to _alex\

Sure...

here you go...

hope it helps...

MB
- dryrun.txt
- View
- Hide
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 andreas over 17 years ago in reply to MBirdCZ

If you have virus scanning with both scanners enabled, this is not unusual. ClamAV has been very busy these days with new updates, so in the last 24 hours there have been 13 up2date packages for ClamAV (~14MB each) and one for Authentium (~9 MB each). This sums up pretty nicely to close to 200MB. Would it be possible that on this gateway you have a service enabled that requires virus scan pattern up2dates, but not on the others?

Usually, there are around 5 ClamAV-up2dates per day, and 2 Authentium, so even on a lazy day up2date traffic would be around 90 MB.

Cheers,
andreas
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 MBirdCZ over 17 years ago in reply to andreas

Yep, the dual scan on HTTP Proxy was enabled. What bugs me is, that on different gateways that are running the 7.104 or 7.2 beta as well this up-2-date traffic is not being shown in the reports.

MB
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel