If you have an IPCop machine and you see the graphs peak but you don't know who is using the bandwidth, try this at the console: iftop -I eth0 iftop has been built in for quite a few version now. -- Waiting for sunspots. -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean.