Monitor WAN traffic 3750

[sketterman]

I have a 3750 acting as my WAN router connected to our MPLS provider via ethernet.  For a couple days my inbound bandwidth has been completely saturated at 20Mbs (the speed of my link).  I know this model of switch does not support netflow, but is there any other way to try and find out what is using all the bandwidth?  I have pretty much ruled out anything on the internet since the in/out interfaces of my firewall are not seeing much traffic.

Thanks in advance

[Eugene Khabarov]

Maybe ip accounting will help?

---

HTH. Please rate this post if it was helpful. If this solves your problem, please mark this post as "Correct Answer."

[ro-mgi-cco]

Hello Sketterman

A way to see what traffic of a 3750 , use a Packet Sniffer and "Monitor" the traffic to the sniffer port.

You can use a SPAN configuration :

(config)monitor session XX source interface Fa/Gi/XX/0/XX

(config)monitor session XX destination interface Fa/Gi/XX/0/XX

You can use Colasoft Capsa or WireShark to do a graphic based on ports or ip's

Cheers

MSYS

[Eugene Khabarov]

Also a variant...