find the IP using excessive resources

[jimlongo]

I'm getting excessive resource usage for sftp and ssh connections (which is fine as I'm pretty confident they are legitimate users), but the client would like confirmation that it is their IP that is connecting.

Is there a way to find that.

I can view the logs but they only show the process and resource, not the IP.

[sawbuck]

You can use netstat from the command line.

[jimlongo]

Thanks, that's great.