The question is, how do we trace the user/process that is causing this data surge?