On 02/22/2011 09:06 AM, Jim March wrote: > One other thing: on top of the Windows guest issue, I've got *something* > in Linux that's also hitting the wire a lot. Is there something similar > to "top" that tracks Linux processes by network traffic impact? I'd > like to eliminate whatever that is before I start on the Windows issues. You can use ntop, but the tcpdump/wireshark combo should give you enough information to determine the source.