We have a Windows 2003 ,Single Forest and Single Domain Active Directory architecture. We have approximately 60 Domain Controllers spread across India. We have more than one Domain Controllers in some sites while on others we have single Domain Controller.Domain Controllers within sites are connected through Switch.While Domain Controller connected across sites are connected rhrough WAN link of 2 Mbps. For few months we have been noticing that huge traffic gets generated over these WAN link randomly. We donot have any application intigrated to Active Directory in our enviornment. We use wireshirk to capture the packets but those are not clear. So can anyone enlighten us as in what traffic usually should be there, and why PC's of various sites need to communicate randomly with Domain Controllers of various sites. What can be the cause of this traffic ? How do we go about rectifying the same.