On Sep 12, 2007, at 5:07 PM, Joe Lagreca wrote:

> I have a client that is running a m0n0wall.  I have been watching
> their network activity via the traffic graph, and I see that their
> outbound traffic has been pegged all day.  I would like to find out
> which machine is causing this and why.  How can I go about figuring
> this out?  Is there some SNMP monitoring utility I can run that will
> give me per user bandwidth information, etc?  Thanks.

Take a look at Diagnostics -> Firewall states

You might get lucky and see the offending IP at the top of the list,  
tallying up traffic.

Lonnie