Strange traffic:iperf

[renfotech]

Hello All,

I have noticed strange traffic generated by the 3cx windows client, my firewall categorises the traffic as "iperf" and the destination is usually the 3CX server.At certain times we have noticed the traffic consumption spike up to about 50GB of traffic being sent to the 3CX server in 2 hours.

Has anyone else experienced this ?

Please note this is not the normal SIP traffic.

 

[JohnS_3CX]

Hello @renfotech

The amount of data you mention is indeed very large to be part of something the client does. Please provide us with some more information on your current way of setup if you can as per here https://www.3cx.com/community/threads/information-to-provide-when-requesting-help.67558/ and then some more information about your specific case like below:

1. How did you ascertain that it is the client that causes the traffic as opposed to anything else coming from that PC IP address?
2. What else is running on that PC?
3. What else is running on your PBX server? Is it Windows based or Debian?
4. What ports is the traffic coming/going from

 

[Dave Webster]

Sorry to crash the party.
Just confirming I have also seen this behaviour in the client.

1. We crash closed the client as it was unresponsive and immediately the data went away.
2. Its a windows 10 1903, nothing unusual just chrome, excel, photoshop, outlook, teams skype and splashtop.
3. we were testing the 3cx client against a centos 7, freepbx box. only thing other than freepbx is an openvpn connection into out network which is where we initially saw the traffic.
4. Sorry I killed it before I had chance to investigate further and it's not doing it again since we restarted the client.

But I'd say that every 30 seconds or maybe a minute it would max out the VPN for a second then stop for a few seconds then max the link again then stop and would repeat that cycle for about 10 cycles then it would repeat about 30 seconds / maybe a minute later.
If it does it again I'll report back.
Best Regards
Dave Webster

 

[JohnS_3CX]

Hi Dave,

Can you please state the exact version of the 3CX client?

 

[Dave Webster]

6.0.26523.0 which I think is the current one?

Regards
Dave

 

[JohnS_3CX]

@Dave Webster You are using a very old discontinued version. Currently it's at version 16.0.1.81

Our client only supports the 3CX system, it cannot be used on FreePBX.

@renfotech Are you also using the old version?