Given a running router/firewall machine, there may be many 'routing connections' going on at same time. I am stucked with a basic question unanswered, how do I know which are the applications using the heaviest routing traffic ? I could do a trial and error by using 'iptables', say using a port range, but there are still too many possibilities. I thought 'netstat' could solve my problem, apparently not. It seems netstat only shows the connection originating and terminating in the machine and not 'routing connections'. I am looking for a simple and light weight program which can meet this requirement. Any recommendation ? __________________________________________________ Do you Yahoo!? Yahoo! Web Hosting - establish your business online http://webhosting.yahoo.com