Traffic on my PIX

[HMidkiff]

I am using a PIX515 and over the last few days my bandwidth has been spiked. I have been running netflow on my outside boarder router to see what traffic is passing but because the PIX is doing NAT it always points to a IP address in the NAT pool. I have been looking for a way to determine who might be generating a log of traffic. Can anyone give me any pointers for tracking this down? Thanks.

[mmorris11]

Well short of using a good sniffer that would produce a nice "top talkers" report, you might be able to get some idea of what is going on with the "show conn" command. For example, the "sh conn state up" command will show you all connections that are up and you might be able to sort through that to see your top talkers.

HTH