Running a ASA 5520 iso 8.0.2
This morning our syslog stats say a user downloaded 1.4GB in 30mins. However on our mrtg there are no masive spikes, also the user only has a 384Kbps line at home so the download time is impossible. The other thing is the users ISP said he hardly used 100MB at home. I have also noticed this on a few other occasions.
Here are the logs, any help would be great. thanks
Nov 12 06:50:43 cptinf Nov 12 2008 06:50:43 internal : %ASA-6-302015: Built inbound UDP connection 18311763 for outside:x.x.x.x/50068 (x.x.x.x/50068) to cptint:y.y.y.y/1194 (y.y.y.y/1194)
Nov 12 07:22:03 cptinf Nov 12 2008 07:22:03 internal : %ASA-6-302016: Teardown UDP connection 18311763 for outside:x.x.x.x/50068 to cptint:y.y.y.y/1194 duration 0:31:19 bytes 1469109264
Thanks for all the help in advance