Hello all, I am having a problem here. Here at our 200 node network we have a Firewall in place. It can only have a 2048 active connection limit. Well I noticed our internet has been real sluggish and its only because the firewall has hit its limit. 2048 sessions is way to high than our regular 50 active connections. I am suspecting we have computers that are infected with some type of virus. What is the easiest way to pinpoint which computers are making all these request?