Help, what tools exist in SuSE to account for internet bytes in? The byte-count from the ISP has gone berserk lately, last month downloads ran to 3 Gig, (costing me over $200 in excess) this month it's already at the limit (1.5 Gig). Is it the teenagers downloading music? (Yes they do but not that much) Is it the Limewire music sharing app generating traffic spontaneously? Am I under some kind of external attack? Have I been hacked? Setup is a home network with 4 computers, one of which is a server (SuSE 8.2) that hosts email and web. Network connection is broadband and always on, (except when I turn it off to slow the traffic). I'm using SuSEfirewall2 with Quickmode NAT, also a squid cache. I'd like to know where the bulk of the bytes are coming from, which (if any) internal computer is calling for them, what protocols (ports) are involved? Thanks for any pointers, michaelj -- Michael James michael.james@csiro.au System Administrator voice: 02 6246 5040 CSIRO Bioinformatics Facility fax: 02 6246 5166