Welcome to ISAserver.org

Bytes IN and Out

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2004 Firewall] >> Logging and Reporting >> Bytes IN and Out

Page: [1]

Message

<< Older Topic Newer Topic >>

Bytes IN and Out - 10.Mar.2005 3:16:00 PM

AdnanRafik

Posts: 63
Joined: 13.Feb.2003
From: UAE
Status: offline

When we publish a report on ISA2004 , it shows bytes in and bytes out. When I check my TOP users it show most of the data transferred to out side means Bytes Out is 600 MB while Byte in 100 MB.

Does these Byte Out are from ISA2004 to a node on the network or from ISA2004 to External network, generatting traffic.

Post #: 1

Featured Links*

RE: Bytes IN and Out - 11.Mar.2005 3:12:00 PM

dmarritt

Posts: 8
Joined: 15.Oct.2001
Status: offline

I've seen the same error with my ISA server. There is a transposition error in the web proxy logs i.e. incoming traffic is logged as bytes out, and outgoing traffic is logged as bytes in. Similarly the usage reports had the same problem.

In a Technet newsgroup response an MS representative acknowledged this is a known issue in Standard edition and would be fixed in the Enterprise edition.

Having applied service pack 1 to my Standard edition I've now found the web usage reports are correct but the logs still show the transposition error.

I'm not very impressed with this aspect of ISA 2004, if you can't trust the logs to be accurate it raises serious questions about the whole product.

Hope this helps.

(in reply to AdnanRafik)

Post #: 2

RE: Bytes IN and Out - 17.Mar.2005 12:09:00 PM

AdnanRafik

Posts: 63
Joined: 13.Feb.2003
From: UAE
Status: offline

Yes the reports are bit confusing but if you look at daily reports you will find out that the BytesIn are always less than the BytesOut, which means that ByteIn is the interface or the Internal IP address of the ISA 2004 which is accepting the request from the client or in other way BytesIn is the data uploaded while BytesOut represents the data downloaded for those requets.

And one more thing is that if there is too much traffic transfer on the BytesIn then uplink can be choked which will result in inavailability of Internet service.

I tried to find the explaination of ByteIn and BytesOut in ISA Help but there isn't.

(in reply to AdnanRafik)

Post #: 3