Forum Discussion
Massive traffic between Exchange Servers 2019
Hello all, We are in a large company with over 50 Exchange Servers (on-premise not on cloud). My site have two Exchange 2019 Servers and we are using a satellite (25mb/s 600ms Latence) link to co...
First question would be if you can identify the ports the traffic is using which might give a head-start on identifying what is going on.
Thank you for you reply, Microsoft Engineers ask me to do an netsh trace with our two Exchange servers.
Btw they are on core edition and I wasnt able to do the scenario=netconnection since it is not available on core edition.
This is what they answer back:
I found major traffics were seen on below TCP ports:
TCP port,444, 389, 443, 3268
There were around :
**22348 packets for tcp port 389
**47369 packets for tcp port 3268
**34073 packets for tcp port 443
**30537 packets for tcp port 444
**26094 packets for tcp port 6068
**369 Packets for tcp port 25
**7472 Packets for port 42906 and 6064
Conclusion :
>> Tcp port 389 is being used by LDAP and 3268 is being used by Microsoft global catalog (LDAP), so traffic on these ports are fine because these are being used by active directory.
>>However we see huge traffic on tcp port 443 , 6068 and 444, need to find which application on exchange server is using these ports.
Check tasklist /svc at the time of issue to figure out which applications has maximum handles and check the ports that are being used by those applications.
But when I analyse the content that they send me, most of the communication are between local computers or servers on our site, so they don't use the satellite link.
The only thing that we have is a Veeam agent installed on that server. We also use Enterprise Vault for archiving our Email (older then 6 months).
Martin