Network spike every 1 hour and 2 minutes

Question

I am running a Ubuntu server and observe that every 1 hour and 2 minutes there is a huge spike on the Bytes send on Network interface standard metrics. While our normal operations require a few hundred kB of traffic, that spike is between 150-250Mb. It appears to be data sent to Azure, as we have closed all other communications except to a couple other of our servers. How can we stop that from happening? What data is so large? Perhaps Metrics for Azure portal? Can we disable them?

Answer 1

Hi,

You can enable NSG flow logs and traffic analytics to visualize what kind of traffic is flowing to your VM and on which port and which Source IP. That can help you to understand your traffic pattern.

Reference: https://learn.microsoft.com/en-us/azure/network-watcher/enable-network-watcher-flow-log-settings

Regards,
Karthik Srinivas