Guest User!

You are not Sophos Staff.

Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 4 replies
  • Subscribers 2 subscribers
  • Views 1950 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

How to track "un-metered" traffic?

larray
I have a bit of a conundrum today.... it looks like my connection is using 3Mbit, but I can only account for around 400KB/s (known activity on a particular system).  When I drill into either All Interfaces or the External (WAN) connection, I see the traffic I expect, but cannot find the additional 2.5Mbit of traffic being used.

Example:
All Interface shows 3.3Mbit use.
Max Bandwidth in use ~ 470KB, HTTP being primary
Bandwidth Usage Now sorted Max to Min



How can I find the additional 2.5+ Mbit of usage if Sophos UTM doesn't report it?


This thread was automatically locked due to age.
Parents
  • 0
    Ok... so that's how you insert [:)]

    I ran an iftop - it looks like it is all VPN traffic, which I'm curious why it isn't being reported as such in FlowMonitor (unless this is site to site), I'm trying to identify the IPs involved now.  Thanks for the reminder about iftop.  

    (iftop attached for the curious)

Reply
  • 0
    Ok... so that's how you insert [:)]

    I ran an iftop - it looks like it is all VPN traffic, which I'm curious why it isn't being reported as such in FlowMonitor (unless this is site to site), I'm trying to identify the IPs involved now.  Thanks for the reminder about iftop.  

    (iftop attached for the curious)

Children
No Data