Client Accessing morre 100 mb of data in 30 min from remote Domain Controller

Hi,

We have two office location and at only one(Head office) location there is domain controller & at other location users get Authentication form my Head office DC, my problem is that the user who Authenticate remotely they are accessing more than 100 mb of data form Domain Controller at port 445 SMB.

My point of worry is what data they are accessing through My domain controller .as there is no data on my domain controller. is these a normal traffic between domain controller and client, My network utilization is getting High because of these.

Through wireshark i found that communication between domain controller and client is happening on port 445 SMB.

Please help.

Thanks.......