I recently had a task to track down an infected PC (WellChia virus) that was hogging all the bandwidth on a T-1. In desperation (and panic)I used netstat variations to learn the IP address of the hog.
Is there a better bandwidth/network hog monitor for interactively monitoring traffic on an SME server? I searched this forum and found a reference to "ntop", but posts were 3 years old.
Anyone have a favorite monitor technique to share?