Anyone have some great solutions to monitoring bandwidth usage and ssh monitoring?

one of my servers burst to 9.2M for about 2 hours this morning (up and down of course) and theres no real way of knowing what the customer did, or who it was. It was all outgoing traffic.....

Well, for monitoring bandwidth, MRTG is a good start. As for working out how all that bandwidth was used, process accounting is a good start (if you've enabled it; unfortunately it isn't enabled by default).

I've already got MRTG (thats how i found out)

How do i go about turning on process accounting?

On FreeBSD, simply add accounting_enable="YES" to /etc/rc.conf; on linux, you'll almost certainly need to recompile your kernel -- the option is probably called "BSD process accounting".

thanks

Anyone have the install file for Process Accounting on Linux?

http://sunsite.unc.edu/pub/Linux/system/admin/quota-acct-modified.tgz

doesnt work