I'm running a CentOS 5 with plesk 10 and problems with slow website loading, now my provider tells me i'm excedding my bandwith.
I've been monitoring the bandwith with iftop and it showed me some connections consuming lots of bandwith.
Now how do i go on about checking what those requests were about? i've got the ip and they are HTTP request probably, should i just start wireshark before and then analize the ip's i found?
Or is there an easyer way?