identify which host is generating all the traffic

[alunemanuel]

Hi All,

This is probably an easy question for a PIX expert!

I have a PIX 515E in one of our offices and the users are complaining of slow internet access. To test the line I removed all network connections and plugged my laptop into the PIX - connection was perfect. Once I reconnected the network is started running dog slow. The downloads are terrible but the uploads are ok.

Therefore I'm assuming that a device on the network must be downloading a lot of data - is there an easy way I can identify which host is doing this? A graph of which hosts are using the most data would probably do it.

I've had a look at the syslog info in ADSM but nothing stands out. As you may have guessed I'm no PIX expert.

I appreciate any help with this.

-Al

[Panos Kampanakis]

If you are running PIX software 8.0 or 8.2 and threat detection is enabled you can use ASDM graphs to see the top talkers.

Also "clear traffic" and "sh traffic" will show you the traffic per interface, not the aggregate.

Also "sh local" and "sh conn" will show you the users and the connections they have which could indicate the top bw users.

I hope it helps.

PK