 Re: smartview installation questions
Sounds like a good assumption. If you don't have a huge amount of traffic, then look at what logs you've got for just as the spike starts. See if you can work it out from that. You could capture traffic.
Another option might be to change the rules to accounting rules, and see if you can work it out from there. |