DirectAdmin & AWStats Massive Difference.

[mjm]

Received a notice that one of our hosting accounts was approaching their transfer limit, upon investigating this I discovered the following;

1. DirectAdmin is showing them transferring roughly 3.5GB a day.
2. AWStats is only showing 500MB a day though.

There is only 1 single domain inside of this account, so I'd expect these numbers to be fairly close. I'm tailing the logs and don't see anything strange going on.

Anyone have any ideas about what could be going on?

Thanks.

 

[smtalk]

AWstats includes your HTTP traffic only (it doesn't include FTP, email traffic etc.).

 

[mjm]

All traffic being reported by DA is HTTP only.

 

[mjm]

Sorry for the double reply, thought screenshots would be useful.

 

[mjm]

How does DirectAdmin monitor HTTP transfer? I'm wondering if there could be files owned by this user somewhere else on the box and that is somehow getting included?

 

[scsi]

It uses the webserver logs.

 

[mjm]

Is there anyway to get more granular reports that would show where all that transfer is going?

 

[mjm]

Has anyone experienced anything like this? I'm at a bit of a loss about how to debug further.