I can see that a particular host on my network is using more bandwidth than any other by looking at the Connection Monitor on our Sonicwall appliance.
I can get an IP address (it's right there in the Connection Monitor) and a MAC address (checking DHCP) of that host.
Where do I go from there? What else an I find out and what tools should I use?
The ultimate aim is to be able to do more than just kill the connection. I'm in a (very small) school that allows students to use their own laptops at school. I need to find out which machine on the network is guilty so I can discuss appropriate use with its owner.
Any and all advice is welcome!