Based on his description, it was standard operating procedure to make multiple local copies of large amounts of data so that you'd have access to it when you needed it even if there were network problems later.
In that case, his network activity may not have looked unusual.
