This stuff always drives me crazy... One of our clients writes: <snip> We have a high amount of incoming data (green on the graph) - can we tell what this is? It seems very constant! </snip> He's writing about an mrtg graph average of 300 gbps. Any easy way (on linux) to tell where the traffic is coming from? Thanks. Jeff -- Jeff Lasman, Nobaloney Internet Services P.O. Box 52200, Riverside, CA 92517 Our blists address used on lists is for list email only voice: +1 951 643-7540, or see: "http://www.nobaloney.net/contactus.html"