Picture 1 phenomena description:The traffic is especial heavy in the wee hours aboute three.
A and B have one USG2160,the A access public network by 4M ADSL dialingof telecommunication,B access public network by ADSL dialing of network communication.Both sides use USG2160 to be gateway,it connects switch and PC.
B need access the server of A and establish IPSec VPN.Beacuse it is dynamic getting address,client purchase the peanut shell dynamic domain name server.Both sides install the peanut shell dynamic domain name server and dynamic update address.
If the traffic is over the user bandwidth,how does the exception traffic produce?which traffic can it be.
The method to deal with:
1、 we can use the traffic statistics which is provided by user to account traffic and find it isn’t over 4M
2、 Analyse exception traffic by the way of obtaining packet.
The analysis of reason of producing exception traffic:
1. Internal network server data need keep backup,the policy of data backup will start in wee hours about 2:30,so it can produce the taffic
2. The antivirus database of internal network user computer or server need upgrade .
3. The virus or trojan of internal network produce the traffic.
4. Many users of internal network install and use P2P software or plug-in.
The raeson of the exception traffic producing is led by antivirus adtabase upgrade and plug-in by analysing interactive packet statistics