Looking for a little help w traffic
railstop last edited by
I decided to check my traffic tonight and I see the pic below. up and down every few seconds of very high output. Nothing is being displayed on the host IP so I have no idea what machine this comes from. I could use a little help to find the culprit. I am not exactly a PF extraordinaire so please bear with me. I am fairly comfortable with setting it up, getting around so It isn't something new to me either
muswellhillbilly last edited by
Under 'System Logs/Firewall' you ought to be able to filter the log to help pinpoint the culprit. Otherwise, install Ntop and have a look at the traffic logs there. It should certainly show you which machine is behind the traffic you're seeing.