Abnormally high Office 365 usage

Robthesoundguy
Here to help

Abnormally high Office 365 usage

Has anyone experienced daily summary reports showing clients generating an abnormally large amount of Office 365 traffic? For example, the daily summary report and corresponding dashboard shows that I had a client send 271.87GB and receive 5.35GB yesterday. 

 

We've been seeing this issue for a few months, but it rarely shows up from the same client. Our team investigates every machine for the usual IoC's or any other anomalies, but we've been unable to find workstation related reason for this spike. The one common factor is that the traffic spike starts after-hours and ends shortly before start of day. We've seen this issue internally as well as with customer networks. 

 

From our analysis of the workstations (both internal and customer), we've been unable to find a reason for this spike and are beginning to think it's a false reading. 

 

Has anyone else experienced this behavior? 

2 Replies 2
lpopejoy
A model citizen

I've seen this when Outlook had a corrupt OST.  Rebuilding the OST resolved the issue as I remember it.

PhilipDAth
Kind of a big deal
Kind of a big deal

I would use Task Manager on those machines, and sort by the "network" column.  Then you can isolate it down to an individual process using the traffic.

Otherwise, there are so many things it could be.

Get notified when there are additional replies to this discussion.
Welcome to the Meraki Community!
To start contributing, simply sign in with your Cisco account. If you don't yet have a Cisco account, you can sign up.
Labels