My Internet, as opposed to VPN traffic, circuit is saturated. Simple question; how do I know what and who is chewing up the bandwidth.
I look at Host traffic charts in NTOP but see the activity is measure over a long period, like 24 hrs.
If the circuit is pegged right now, how do I know who is downloading a huge file or streaming music?
Use ntopng rather than ntop. Its main screen focuses on immediate/current traffic usage.