I am having trouble on our school network recently. When browsing the internet users will often get an error from the browser saying "No Internet DNS_PROBE_FINISHED_NXDOMAIN" but when they refresh the page will load. I at first suspected our dns server since pages were having trouble resolving. I tried several different ones, but saw no difference. I called our provider but they said there was an overwhelming amount of network traffic being sent to the modem.
When monitoring network traffic, there are almost always a couple of computers sending a lot of packets. They always seem to be different computers. I can see the computers in the lab and it is usually a student that does not have a browser open running Mavis Beacon or something else that does not use internet. All our computers are running Windows 10. Traffic is always coming from some content delivery network such as akamiedge, amazonaws, or edgecastcdn.
I have tried researching this issue, but most say that these are harmless content delivery networks that Microsoft is using to download updates. I have set up all the school computers to receive all updates from Windows Server 2012 R2 with WSUS so they should not be downloading any updates from Microsoft.
I have a Netgear ProSAFE Firewall set up with Block TCP and UDP Floods left at their default limits. I have tried checking background processes on some of the pc's for network usage. Chrome is always using about .1mbps constantly and some as well as "From Microsoft backround task host" and "from microsoft download\upload host". Adobe has some background stuff, but this isn't installed on all computers.
I am at a loss as to what to try and worry about some adware on the server or router as this kind of traffic seems to come from all the computers. This happened suddenly about a month ago and I haven't been able to track it down to anything in particular. Would appreciate any suggestions. Thanks!