I have a computer that showed up on the Monthly Report as uploading 2.5Tb of traffic to (HTTP-Alt) port 8080 one afternoon 9/26/13 between 1PM and 4PM, the computer was off site the rest of that day. Since then it has had no other abnormalities. I believe this just might be some glitch in the log because the computer connected via 802.11g and don't see it getting enough throughput to upload that much data.
To be certain there isn't something major going on here I would like to verify what the traffic's destination. I've checked every log and can not seem to find a place where 8080 traffic is logged with it's destination. The external interface only had 1Gb on it so it appears that all of the 8080 was an internal destination. Never the less any thoughts on how I can figure out where all that data was going would be appreciated.
This thread was automatically locked due to age.