I'm hoping this is the correct forum.
We have a NW 6.5 BM 3.8 server providing our NAT/Firewall/Manual website
blocking, etc services. Over the past couple days, I've noticed something
in our MRTG that is spiking our outbound T1 to 100% for 5-10 minutes at a
time, then drops back down, only to spike again a few minutes later.
Normally, our outbound traffic runs very low. This feels like a student
has found an app or website that allows him/her to upload something.
I need to know if there is a way to determine what IP/username is causing
these outbound bandwidth spikes.