topic Re: monitoring bandwidth with PIX in Network Security https://community.cisco.com/t5/network-security/monitoring-bandwidth-with-pix/m-p/830763#M956243 <HTML><HEAD></HEAD><BODY><P>try this friend</P><P></P><P><A class="jive-link-custom" href="http://www.adventnet.com/" target="_blank">http://www.adventnet.com/</A></P></BODY></HTML> Mon, 04 Feb 2008 06:52:44 GMT norman_santana 2008-02-04T06:52:44Z monitoring bandwidth with PIX https://community.cisco.com/t5/network-security/monitoring-bandwidth-with-pix/m-p/830748#M956218 <P>Is there any technique (no matter how primitive) I can use to single out high-bandwidth using private IPs behind my PIX? I am currenty using MRTG and I see a cummulative total of bandwidth usage but I need to know what individual IPs are using the bandwidth.</P><P></P><P>Thanks,</P><P>Diego</P> Mon, 11 Mar 2019 11:54:36 GMT https://community.cisco.com/t5/network-security/monitoring-bandwidth-with-pix/m-p/830748#M956218 tato386 2019-03-11T11:54:36Z Re: monitoring bandwidth with PIX https://community.cisco.com/t5/network-security/monitoring-bandwidth-with-pix/m-p/830749#M956219 <HTML><HEAD></HEAD><BODY><P>There really isn't much you can do with the PIX in this situation. You do have other options though. You could use MRTG to monitor your switch ports or you could use a sniffer (ie Wireshark) and see who the top talkers are.</P><P></P><P>HTH </P></BODY></HTML> Mon, 28 Jan 2008 18:45:57 GMT https://community.cisco.com/t5/network-security/monitoring-bandwidth-with-pix/m-p/830749#M956219 Collin Clark 2008-01-28T18:45:57Z Re: monitoring bandwidth with PIX https://community.cisco.com/t5/network-security/monitoring-bandwidth-with-pix/m-p/830750#M956221 <HTML><HEAD></HEAD><BODY><P>I have a better solution. Replace the Pix</P><P>with Checkpoint Firewall. You can do this</P><P>with Checkpoint SmartView Monitor and it will</P><P>give you just about everything you need, </P><P>including top talkers.</P><P></P><P>CCIE Security</P></BODY></HTML> Mon, 28 Jan 2008 18:48:16 GMT https://community.cisco.com/t5/network-security/monitoring-bandwidth-with-pix/m-p/830750#M956221 cisco24x7 2008-01-28T18:48:16Z Re: monitoring bandwidth with PIX https://community.cisco.com/t5/network-security/monitoring-bandwidth-with-pix/m-p/830751#M956224 <HTML><HEAD></HEAD><BODY><P>The Wireshark sounds good but I don't have a SPAN capable switch. This would mean trying to find a hub to connect the PIX inside interface and Wireshark machine, no?</P></BODY></HTML> Mon, 28 Jan 2008 19:31:50 GMT https://community.cisco.com/t5/network-security/monitoring-bandwidth-with-pix/m-p/830751#M956224 tato386 2008-01-28T19:31:50Z Re: monitoring bandwidth with PIX https://community.cisco.com/t5/network-security/monitoring-bandwidth-with-pix/m-p/830752#M956226 <HTML><HEAD></HEAD><BODY><P>I'm afraid so.</P></BODY></HTML> Mon, 28 Jan 2008 20:00:21 GMT https://community.cisco.com/t5/network-security/monitoring-bandwidth-with-pix/m-p/830752#M956226 Collin Clark 2008-01-28T20:00:21Z Re: monitoring bandwidth with PIX https://community.cisco.com/t5/network-security/monitoring-bandwidth-with-pix/m-p/830753#M956228 <HTML><HEAD></HEAD><BODY><P>If you don't have SPAN switch on outside interface you can use hub to get copy of all PIX</P><P>traffic to the port. Hook up a machine and run either Ethereal (look for</P><P>the top talkers) or run nTop.</P><P></P><P><A class="jive-link-custom" href="http://www.ntop.org/" target="_blank">http://www.ntop.org/</A></P></BODY></HTML> Mon, 28 Jan 2008 20:00:27 GMT https://community.cisco.com/t5/network-security/monitoring-bandwidth-with-pix/m-p/830753#M956228 m.sir 2008-01-28T20:00:27Z Re: monitoring bandwidth with PIX https://community.cisco.com/t5/network-security/monitoring-bandwidth-with-pix/m-p/830754#M956230 <HTML><HEAD></HEAD><BODY><P>I have just found conversation on similar topic</P><P><A class="jive-link-custom" href="http://groups.google.pl/group/comp.dcom.sys.cisco/browse_frm/thread/972a527ba458f06/2d9638c4e38063ef?tvc=1&amp;q=consumes#2d9638c4e38063ef" target="_blank">http://groups.google.pl/group/comp.dcom.sys.cisco/browse_frm/thread/972a527ba458f06/2d9638c4e38063ef?tvc=1&amp;q=consumes#2d9638c4e38063ef</A></P><P>Check the Perl script in last post</P><P>M.</P></BODY></HTML> Mon, 28 Jan 2008 20:03:24 GMT https://community.cisco.com/t5/network-security/monitoring-bandwidth-with-pix/m-p/830754#M956230 m.sir 2008-01-28T20:03:24Z Re: monitoring bandwidth with PIX https://community.cisco.com/t5/network-security/monitoring-bandwidth-with-pix/m-p/830755#M956232 <HTML><HEAD></HEAD><BODY><P>Good idea, but you will probably only see your NAT'd address not the internal IPs.</P></BODY></HTML> Mon, 28 Jan 2008 20:03:35 GMT https://community.cisco.com/t5/network-security/monitoring-bandwidth-with-pix/m-p/830755#M956232 Collin Clark 2008-01-28T20:03:35Z Re: monitoring bandwidth with PIX https://community.cisco.com/t5/network-security/monitoring-bandwidth-with-pix/m-p/830756#M956234 <HTML><HEAD></HEAD><BODY><P>Google 'PIX' and 'logging' and there are some free options out there that might help. I tried PLA once and it looked decent, but the link is currently down. You may need to turn on debug level logging on the PIX for the app to work properly, check the documentation.</P></BODY></HTML> Mon, 28 Jan 2008 20:10:24 GMT https://community.cisco.com/t5/network-security/monitoring-bandwidth-with-pix/m-p/830756#M956234 Collin Clark 2008-01-28T20:10:24Z Re: monitoring bandwidth with PIX https://community.cisco.com/t5/network-security/monitoring-bandwidth-with-pix/m-p/830757#M956236 <HTML><HEAD></HEAD><BODY><P>Version 8 ASDM gives you top 10 services, talkers and destinations based on IP address, with intervals of 1hr, 8hr and 24hr. </P></BODY></HTML> Tue, 29 Jan 2008 10:30:12 GMT https://community.cisco.com/t5/network-security/monitoring-bandwidth-with-pix/m-p/830757#M956236 russ 2008-01-29T10:30:12Z Re: monitoring bandwidth with PIX https://community.cisco.com/t5/network-security/monitoring-bandwidth-with-pix/m-p/830758#M956238 <HTML><HEAD></HEAD><BODY><P>What are the hardware requirements? I have 506 and 515 PIXes running V6.2 and V6.3 images.</P><P></P><P>Thanks,</P><P>Diego</P><P></P></BODY></HTML> Tue, 29 Jan 2008 12:48:58 GMT https://community.cisco.com/t5/network-security/monitoring-bandwidth-with-pix/m-p/830758#M956238 tato386 2008-01-29T12:48:58Z Re: monitoring bandwidth with PIX https://community.cisco.com/t5/network-security/monitoring-bandwidth-with-pix/m-p/830759#M956239 <HTML><HEAD></HEAD><BODY><P>The Pix 506 is not supported, Pix 515 requires 128MB ram for UR licence and 64MB for restricted licence and 16MB flash, see version 8 release notes for further information.</P></BODY></HTML> Tue, 29 Jan 2008 14:10:49 GMT https://community.cisco.com/t5/network-security/monitoring-bandwidth-with-pix/m-p/830759#M956239 russ 2008-01-29T14:10:49Z Re: monitoring bandwidth with PIX https://community.cisco.com/t5/network-security/monitoring-bandwidth-with-pix/m-p/830760#M956240 <HTML><HEAD></HEAD><BODY><P>Another way is to use th tool Netflow but you should do this in a router pix do not support netflow</P></BODY></HTML> Thu, 31 Jan 2008 23:02:02 GMT https://community.cisco.com/t5/network-security/monitoring-bandwidth-with-pix/m-p/830760#M956240 Alejandro Cortes Rivera 2008-01-31T23:02:02Z Re: monitoring bandwidth with PIX https://community.cisco.com/t5/network-security/monitoring-bandwidth-with-pix/m-p/830761#M956241 <HTML><HEAD></HEAD><BODY><P>Hi,</P><P></P><P>You could try collecting the syslog data from the PIX and using a reporting tool like Sawmill to generate reports.</P><P></P><P>See this article:</P><P></P><P><A class="jive-link-custom" href="http://lachniet.com/cheaplogging/" target="_blank">http://lachniet.com/cheaplogging/</A></P><P></P><P>Cheers!</P></BODY></HTML> Thu, 31 Jan 2008 23:59:14 GMT https://community.cisco.com/t5/network-security/monitoring-bandwidth-with-pix/m-p/830761#M956241 mmcsweeny 2008-01-31T23:59:14Z Re: monitoring bandwidth with PIX https://community.cisco.com/t5/network-security/monitoring-bandwidth-with-pix/m-p/830762#M956242 <HTML><HEAD></HEAD><BODY><P>Hello Diego,</P><P></P><P>try NTOP (<A class="jive-link-custom" href="http://www.ntop.org/news.html" target="_blank">http://www.ntop.org/news.html</A>)</P><P></P><P>best regards,</P><P>Paulo Valverde</P></BODY></HTML> Fri, 01 Feb 2008 15:07:14 GMT https://community.cisco.com/t5/network-security/monitoring-bandwidth-with-pix/m-p/830762#M956242 paulovalverde 2008-02-01T15:07:14Z Re: monitoring bandwidth with PIX https://community.cisco.com/t5/network-security/monitoring-bandwidth-with-pix/m-p/830763#M956243 <HTML><HEAD></HEAD><BODY><P>try this friend</P><P></P><P><A class="jive-link-custom" href="http://www.adventnet.com/" target="_blank">http://www.adventnet.com/</A></P></BODY></HTML> Mon, 04 Feb 2008 06:52:44 GMT https://community.cisco.com/t5/network-security/monitoring-bandwidth-with-pix/m-p/830763#M956243 norman_santana 2008-02-04T06:52:44Z