ASA CLI

[Bel Marsad]

We have some users downloading big files from the net, and I want to find out a CLI to find quickly this user by his ip address on my ASA. I used show conn but its showing me about 15000 connections with Bytes transferred but it take time to find out the user with the biggest download. I know that there is a CLI to use for this purpose. Is there someone that know this command?

Thanks in advance

[PAUL GILBERT ARIAS]

normally I use the command "sh conn | i idle 0:00:00". That tells me the active connections and the amount of bytes consumed.

you could also use a netflow analyzer and monitor the hosts.

[Bel Marsad]

Thanks for your reply,

But this command doesn’t help to find out quickly the top downloader.

[PAUL GILBERT ARIAS]

try a netflow analyzer such a Orion from Solarwinds.