hi everybody

I have a problem in a large network, this is that i don't know who is
taking all the bandwidth, and i can't  control that by ip because the
are many machines, how can i do this, what i think is that may be i
can recompile monowall with iftop in it, so i can detect bandwidth
use.

if so how can i??

any other ideas??