I occasionally see large amounts of traffic saturating WAN links between a centrally located WLC and any one of several remote access points. Most of the traffic on the remote APs is locally switched (flexconnect) but there are a couple of SSIDs that are centrally switched (e.g. guest). My tools just show the traffic between the AP and the WLC. .How can I drill down and determine which endpoint is consuming that bandwidth?