WHM said they record almost 97% data transfer, but if I compare bandwidth usage through with Bandmin, it shows 5 : 7 ratio.

For example: if WHM show 5 gigs bw usage, bandmin show 7 gigs.

Is it normal? Should I check any log to find out who's abuse my system??