The Bandwidth interface displays bandwidth usage over time when enabled by the server profile.
cPanel can break usage into categories such as HTTP web traffic, POP3, IMAP, FTP, SMTP, and total traffic. This can help determine whether increased transfer usage is coming primarily from website traffic, mail, or file transfers.
Bandwidth graphs are historical usage information. They do not by themselves identify which individual file or message caused a spike; combine them with access logs or service-specific information when deeper analysis is needed.