What could be wrong with the server?

Question

Debian

Hello. There is a server. one site is spinning on it. Noticed this crap.
that in the server traffic statistics (hoster panel) the values ​​for incoming and outgoing have been swapped since December last year. Those earlier, on average, our server consumed 400-500 GB of incoming traffic, then from 12.20 sharply it became 30 Terabytes. And vice versa, outgoing was 5-7 Tb, suddenly it became less than 1 Tb.

The hoster says that there were no problems in the work of the statistics collector. If everything is really so, then where to dig, what to look to find out why this could happen?

Answer 1

An interesting site - usually incoming traffic is a couple of orders of magnitude less than outgoing. You don't have your own monitoring, as I understand it? In the access logs of the web server, the size of requests / responses is not written, by chance - then it would be possible to estimate on the fingers, sorting by urls.