locating the sites generating crazy traffic?

[whitebullet]

Hi,
Recently we have seen sudden downfalls in the server which happens very quickly. Its all good right now, server load averages around 1. All of a sudden the load is as high as 12 and everything is stuck (even ssh).

I was wondering, whats the best way to figure out whats causing it. Also, whats the best way (or log location) to figure out which domains/websites are causing so much of load?

 

[Infopro]

This might be useful to you:
WHM > Server Status > Daily Process Log

At top of page you can click dates to go back and look at other days. Users spiking processes should be easy to spot. Although the reason why wouldn't be displayed here, this will give you some idea where to start looking.