This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

What is this HUGE daily traffic?

Hi,
I am seeing very huge trafic on network usage reports:

TOP ----------- IP---------- SERVER NAME-------CONNECTIONS -----TOTAL
1 ------- 79.***.***.2------- aaa.example.com-------1 658 092------ 39.6 GB

its my EXTERNAL ip of astaro and host name of astaro.

What the hell is this traffic? Last 7 days 242.1 GB traffic made by astaro. Can anybody explain me what exacly this traffic is?

This thread was automatically locked due to age.

Parents

0 BAlfson over 15 years ago

You are correct that the Astaro isn't accounting for the other traffic, but I think it wouldn't have this mystery traffic if you didn't have another problem.

When you look at "Top servers by service" on port 80, what is the source of this traffic? If it's akamai servers, then maybe you have the problem in this thread: https://community.sophos.com/products/unified-threat-management/astaroorg/f/55/t/43835.

Please let us know.

Cheers - Bob

Sophos UTM Community Moderator
Sophos Certified Architect - UTM
Sophos Certified Engineer - XG
Gold Solution Partner since 2005

MediaSoft, Inc. USA
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 BAlfson over 15 years ago

You are correct that the Astaro isn't accounting for the other traffic, but I think it wouldn't have this mystery traffic if you didn't have another problem.

When you look at "Top servers by service" on port 80, what is the source of this traffic? If it's akamai servers, then maybe you have the problem in this thread: https://community.sophos.com/products/unified-threat-management/astaroorg/f/55/t/43835.

Please let us know.

Cheers - Bob

Sophos UTM Community Moderator
Sophos Certified Architect - UTM
Sophos Certified Engineer - XG
Gold Solution Partner since 2005

MediaSoft, Inc. USA
Cancel
Vote Up 0 Vote Down

Cancel

Children

0 h3mp over 15 years ago in reply to BAlfson

You are correct that the Astaro isn't accounting for the other traffic, but I think it wouldn't have this mystery traffic if you didn't have another problem.

When you look at "Top servers by service" on port 80, what is the source of this traffic? If it's akamai servers, then maybe you have the problem in this thread: http://www.astaro.org/astaro-gateway-products/web-security-http-https-ftp-im-p2p-web-filtering-antivirus/23356-excessive-usage-akamai-ips.html.

Please let us know.

Cheers - Bob

top servers for port 80 account for the outside world (totals to 3.3GB):

all these IP addresses are owned by google.com, and if you type them in the browser they all resolve to the google.com homepage!
Cancel
Vote Up 0 Vote Down

Cancel