50Mbps outbound traffic from Port 80

I am running a Win2000 server as a web server. Yesterday, data center
talked to me that my server has unTsual outbound traffic from Port80. It
send a huge amount of outbound traffic to other servers on my network. The
outbound traffic almost reached 50Mb per second. My data center has cut my
bandwidth to 10M half until I can solve this problem.

Please help and advise me what the possible reason why the web server
generate so much outbound traffic to other servers on my network. P,S. It
is the traffice inside the network.

Thanks,
Chris

If the data center is smart enough to think they see that,...then they
should be smart enough to tell you what it is and where is was going (to
what host?).

Web Servers are passive,...they don't "send" anything that a host has not
"retrieved" from them.
Of course you could be infected with something, but you'll have to sort that
out yourself.

Another thing,..the 50Mbps is meaningless and does not mean something "bad"
is happening. *All* traffic, no matter what it is, no matter what it is
for, no matter why it is happeing,...will always travel at the full speed
that is possible on the medium that it is traveling over. If the Data Center
is running around thinking the "Sky is Falling and we're all gonna Die!"
because they see traffic moving at 50Mbps means they may not be very bright.
Besides that 50Mbps is only 50% of the wire's possible speed on a regular
100Mbps LAN to begin with,...and is only 5% of the capability of a Gigbit
LAN. So they ought to be worried about why it is so *slow* :-)

BTW - 10Mbps is still 6.6 times faster than a T1 and is probably more than
you would really need for a Web Site.

One more thing,...Web servers listen on Port 80,...that means incomming. All
outbound traffic will leave the the webserver on a random Source Port (aka
Client Port) and will be in direct response to previous traffic that it
received inbound on port 80.

--
Phillip Windell [MCP, MVP, CCNA]
www.wandtv.com


"Chris" <(E-Mail Removed)> wrote in message
news:(E-Mail Removed)...
>I am running a Win2000 server as a web server. Yesterday, data center
>talked to me that my server has unTsual outbound traffic from Port80. It
>send a huge amount of outbound traffic to other servers on my network. The
>outbound traffic almost reached 50Mb per second. My data center has cut my
>bandwidth to 10M half until I can solve this problem.
>
> Please help and advise me what the possible reason why the web server
> generate so much outbound traffic to other servers on my network. P,S.
> It is the traffice inside the network.
>
> Thanks,
> Chris
>

"Chris" <(E-Mail Removed)> wrote in message
news:(E-Mail Removed)...
>I am running a Win2000 server as a web server. Yesterday, data center talked
>to me that my server has unTsual outbound traffic from Port80. It send a huge
>amount of outbound traffic to other servers on my network. The outbound
>traffic almost reached 50Mb per second. My data center has cut my bandwidth to
>10M half until I can solve this problem.
>
> Please help and advise me what the possible reason why the web server generate
> so much outbound traffic to other servers on my network. P,S. It is the
> traffice inside the network.

Install WireShark and find out yourself.