You might check to see whether the bandwidth is being generated by a single user, or a small group of users. Also, whether a few pages are accounting for a large percentage of the bandwidth.