Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have a VPS on which I have Windows Server 2008 R2 installed. My monthly traffic is near 100 Gigabytes per month, and I don't have heavy sites on it (no download center, no movies, just text and image).

However, last time when I logged into the server management panel, I saw that the traffic was heavily consumed (near 80 Gigabytes per almost 10 days), and when I logged into the server, I saw that the network is busy (using Task Manager, Network tab). However, I don't know what is using my server. No virus, because I have MSE installed and running there. I stopped all websites, but still network is sending and receiving data.

How to know what process or application is using my network and traffic?

Note: I'm a .NET developer, not a system admin, and this VPS is for personal usage only. And please, I don't care if Linux is better than Windows or not. Also I couldn't find an answer on this site. Maybe this question is duplicate, but I didn't find anything.

share|improve this question
"No virus, because I have MSE installed" that is not a reasonable conclusion. – John Gardeniers Oct 9 '12 at 9:41
In addition to what John said, even if it is virus-free, that doesn't mean it hasn't been hacked or compromised. – HopelessN00b Oct 9 '12 at 10:45
up vote 4 down vote accepted

Have a look using TCPView and see what address the traffic is going out to.

What do you use the VPS for? Does it host any blogs or content management systems? Are they on the lastest stable releases and does the server install patches and security updates? Check that nothing you run on it has potential security issues (does it have Java installed?)

share|improve this answer
Just what I wanted. Thanks. Is there an application like TCPView, but more professional to draw graphs, and let you filter ports, etc? – Saeed Neamati Oct 9 '12 at 11:11
Have a look at the rest of the Windows Sysinternals suite - maybe there is but nothing that I'm aware of - TCPView is "good enough" for my needs. – tombull89 Oct 9 '12 at 11:43
As a thought, Wireshark might do what you want in regards to filtering, although it's a bit more of a learning curve than TCPView's "double-click and watch" and I don't know about graphs. – tombull89 Oct 9 '12 at 11:44
update: if you want something really easy you cant try – Thomas Oct 19 '15 at 13:10

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.