Over the past few days I am seeing a large increase of inbound traffic on a T1 circuit. So much so that the circuit is saturated about 8 or 9 hours a day. Is there a way that I can monitor this to see where this traffic is comming from? I have a 7206 VXR, with the T1 in question, an ATM DS3 circuit for upstream, and a DS3 ATM for DSL customers. The traffic is coming in the T1 and I think out the DSL DS3.
ip accounting in your T1 interface, or others, can be used to Identify where this traffic is going to and from (assuming it's IP traffic). Here's a link to show you how to enable it and show your stats.
(See Ip accounting if it does not bring you right there)
Hope this helps you,