Topic: Excessive Data Usage

[Drufazz]

Hi All,

We run a small network with SME server running as a server/gateway.

Last month we went over our ISP's monthly download limit in ten days, something that has never happened before. The isp sent us a copy of the logs and some of the excessive data was on weekends. The only thing running here on the weekends is the server itself.

I checked the logs of the server and as far as it was concerned there was no activity that weekend.

Anyone got any ideas what could be causing this data usage ? It was 290mb on Saturaday and 180mb on Sunday.

Cheers,

[jester]

Are you sure everything was off? Some one's pc/laptop that was still on and that is infected or has got a p2p program running?!

[idp_qbn]

Just a thought - there were no Windows PCs left running, were there? Those amounts could easily be Automatic Updates.
There is a way to check next weekend...pull out the LAN cable, leaving the SME box the only thing connected to the Internet FOR SURE!

Cheers
Ian

[Drufazz]

Thanks for the replies guys.

No, no system is running at all except for the adsl router and the server.

The guy from the ISP said maybe someone had found a way to exploit the mail system and was using it to spam ? He was going to run some scans on our system last night to see if there was any vunerabilites. Haven't heard back from him yet.

I never setup the internet side of our network, it was done by the internet guy. I've been looking at it since this data usage problem surfaced and it is setup on the router as "PP over ATM (PPPoA)".

Shouldn't the router be setup in bridged mode and sme server setup to handle the adsl connection side of it ?

Cheers,

[raem]

Drufazz

We run a small network with SME server running as a server/gateway.....
Shouldn't the router be setup in bridged mode and sme server setup to handle the adsl connection side of it ?

Yes