net traffic

Another way to think of it is to consider that the client makes requests and the server responds.  So, you can have servers and clients both internally and externally.

Cheers - Bob

Hi Bob,

Thank you as alwyay for your reply,

Any idea why in the report the totaal net traffic is not the same as totaal intern en extern traffice?

Thanks

Without a picture, I'm not sure to which items you're referring, Aresh.  Maybe the following will help - when a client goes to Google, the browser sends packets to the Internal interface where they are counted as incoming, when the packets are sent to Google, they are counted as outgoing from the External interface, thus appearing to count the traffic twice.  Was that your question?

Cheers - Bob

Hi Bob,

Thank you for the reply,

Your explanation regarding the double couning is helpful.

I upload the graph of yesterday daliy report, why the traffice processed said 24.4 gb? how utm come to this number?

the report says:

network usage:

Traffic process: 24..4 Gb

eth0(lan): 30.45 gb

eth1(wan) : 15.80

eth3: 2.42

Hi Aresh,

I checked the screenshots you shared. I am unable to figure out where did you discovered traffice processed said 24.4 Gb ?

Thanks

Sachin Gurung

Hi Sachin,

Thank you for the update,

I see the 24.4 in the same daily Report that see the graphs:

If you like I can send you the that daily Report

Hi Sachin,

Thank you for the update,

I see the 24.4 in the same daily Report that see the graphs:

If you like I can send you the that daily Report

Hi Aresh,

Yes, please share it!

Thanks

Sachin Gurung

Hi Sachin,

Please let me know if I can mail it to you, because it has information that we dont want to become public.

Thanks

Hi Aresh,

Monitored your reports. The graphs in the executive report might vary compared to the reporting data stated in the executive report. Variations might also occur in regard to the inline reports. 

Thanks

Sachin Gurung

View online

Hi Sachin,

Ok, then  should we go with 24.4 gb?  we also monitor port of the switch that eth1 is connected to  and I did check the data for the same priod 09/04/2016 00:00 untill 10/04/2016 00:00 ( I am not sure if the time is the same as the time when Sophos run the report for)

I have the exact same question. Sorry, I posted in the german forum.

https://community.sophos.com/products/unified-threat-management/f/68/t/76917

But it is about the same situation only that we have even more traffic shown in the interfacegraph than in the executive report.

In the graph it says 1,6TB and the execuitve report says only 90GB from the TOP 20 Servers and Clients.

Can there really be such a big variation between the graph and the executive report data?

Hi,

That is lot of difference, mijn is only 10 to 20 GB, and to be honest with you still I dont understnad why it should be differenc at all !

If I find any thing useful will let you know.

Thanks

Thanks. At least you also say that it should be the same amount of traffic in the graph and in the processed traffic.