Endian Knowledge Base
Search:     Advanced search
Browse by category:

I have constantly high outgoing traffic. Do i have a worm?

Add comment
Views: 1675
Votes: 0
Comments: 1
Posted: 02 Oct, 2007
by: Warasin P.
Updated: 02 Oct, 2007
by: Warasin P.
There are two possibilities to determine the source of the huge traffic:

  • See the current connections within Status > Connections and try to figure out if there is an ip address which causes a bunch of connections more than usual.

  • Enable traffic monitoring within Services > Traffic Monitoring.
    This tool is able to record the connections which go through the firewall and create statistics and reports about each ip address of your internal network. So you can easily determine the ip address which causes the most traffic.
Most probably the reason of the high traffic is to be found on the machine which causes the most traffic.
Showing: 1-1 of 1  
Comments

28 Oct, 2007   |  cszeto
The daily "Log Summary" under the "Firewall" section can also assist in determining the hosts as well as ports involved.


Others in this Category
document My /var partition is full, what now?
document My SMTP proxy stops processing emails. No Emails will be send/received anymore.
document Greylisting does not work anymore?
document I lost my root password!! What now?
document How to replace a failed hard disk from a raid
document Why is whitelist not working with http proxy authentication / contentfilter / antivirus?



RSS