Internet bandwidth usage reporting in real time

[chrisgerke]

Need some guidance with regard to software selection and physical layout. I've been asked to provide reports on internet usage;

- IP address

- port/protocol

- bandwidth

We havcusco cisco 4500.

Our ISP router is 3400 metro router (fibre to Ethernet media converter).

We have the ISP connected to a port on the 4500 in vlan 99, the users are in vlan 44 (using a virtual layer 3 gateway).

If I want to do just a quick capture could i simply connect a workstation with wireshark to a port on the 4500 and place that port in vlan 99?

If so I assume the same theory would work with tool like bandwidthD that is more suited to long term captures and has a nice pretty GUI for my  manager?

Bit confused as to whether I need a mirror or span port setup.

Thanks

[Tilman Schmidt · Accepted solution]

You'll need to configure SPAN with VLAN 99 as the source and the port your reporting workstation is connected to as the destination. Otherwise most of the traffic will never reach the reporting workstation.