Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 3 replies
  • Subscribers 4 subscribers
  • Views 2162 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Who is uploading?

SvenSchuchmann

Hi,

I would like to know who is using my upload traffic.

Following Situation:

  • In the Dashboard I can see that one of my Interfaces is using the Maximum "Out" Traffic.
  • If I click on it the flow monitor opens and I can see that Application "HTTP" is using the traffic with 1 Client
  • If I click on the "1" I come to "Details on HTTP" but I only see 1 client which is the Interface Address

So where do I get the Information who is producing the whole out traffic?

cu SveN



This thread was automatically locked due to age.
Parents
  • 0

    Hi, Sven, and welcome to the UTM Community!

    This means that httpproxy is handling a web access for a user.  You should be able to find what you want on the Web Protection page, in 'Logging & Reporting >> Web Protection' and on the 'Bandwidth Usage' tab of 'Logging & Reporting >> Network Usage'.

    Cheers - Bob

     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
  • 0 in reply to BAlfson

    Hello Bob,

    thanks for your response. Indeed it came out that one user was uploading stuff over https-proxy to github.

    But: I was not able to identify this since this upload traffic is much less then the download traffic (async line).

    In none of the reports I am able to say: Show me the upload traffic :-(

    Or did I missing something?

     

    cu SveN

  • 0 in reply to SvenSchuchmann

    I'd recommend trying iview. Much easier to use and gives you reports in a formatted manner. Looking at iview, I've managed to trace misconfigurations on our networks etc

    If I need a really detailed view eg packwise etc, then I use ntopng (pro version)

Reply Children
No Data
Unfiltered HTML