ASA 5520, outside interface pegged.

[jdenzer]

The outside interface on my ASA has been pegged now for about 4 days, just noticed it this morning. How do I find out who is hogging all the bandwidth??

[JORGE RODRIGUEZ]

You can use IOS netflow and configure top talkers either on a router behind or front of ASA5520 firewall, this could be one way.

http://www.cisco.com/en/US/products/ps6601/products_ios_protocol_group_home.html

another way is through ASDM Firewall Dashboard

Load asdm,

home/Firewal dashboard in right lower corner you have pie graph that shows top 10 services, top 10 resources and top 10 destinations.. in top 10 destinations should give you some clue of who uses most bandwidth.

[jdenzer]

I had to upgrade asa and asdm images to get this "dashboard". Nice feature!

It appears that the traffic is coming from 72.246.30.0/24 ip addresses, registered to AKAMAI.