I've setup a network monitoring using Observium but I see something really strange, on 3 buildings (2 Production laboratories and 1 office) (There are no servers connected on those switchs), the network is more loaded at night than at day .
Here are the graphs (one per building, this is the global traffic on the whole switch) :
On those swith are connected :
- Desktops (should be shutdown at night)
- Wyse client (same thing)
- CCTV
- Printers
- Environment monitoring
Have you any idea of what can this be ?
Thank you
Backups? Windows updates? pr0n? - Is this a problem?
I think this depends more on your environment and your users' activities more than anything else. We can't necessarily tell you what's happening in your infrastructure.
Observium is a good start. You could probe the network, perhaps set up Wireshark or Ntop on a span port on the switch... That can help you analyze traffic. Do you have any insight into firewall/internet traffic during those times of higher activity?
We just found it was the CCTV network that uses more data by night