Hello,
Last night we had a LOT of traffic used by someone on our network and I'm trying to track the user down.
The traffic is NOT http traffic so doesn't appear in the web proxy logs.
The top traffic sites reports the IP the traffic was to(Server), but not the end users IP on our LAN.
How can I find the logfile that reported this traffic and find the culprit.
EDIT: PS: I can see topic user report, but I'd like more that a "guess" as to whether that user was indeed the one going to THAT site.
This thread was automatically locked due to age.