Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I have a virtual machine hosted by Hyper-V, in a physical server provided by Hetzner.

The physical server has Windows 2008 R2 Server, and the virual machine has Windows 7 Pro 32-bit.

The virtual machine is running IIS and is accessible from outside via a dedicated IP.

My traffic is monitored by Hetzner, and sometimes I receive a notification for a huge spike in outgoing traffic (for the VM's IP), like 2 or 3 GB in an hour. But this is a test machine, and only a few people know about it.

There is absolutely no demand that justifies this volume of data transfer.

Using TCPView from Sysinternals, running on the VM, I don't see any suspicious connection.

Can the traffic be caused by a process not listed in TCPView?

share|improve this question

1 Answer 1

When they tell you have a spike of outgoing traffic execute the Resource Monitor of Windows 7 (using perfmon.exe) and go to the tab called Network.

There you can order your process by send bytes per second and know what is sending that traffic. Regards

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.