03-21-2007 09:31 AM - edited 03-05-2019 03:02 PM
Hi All,
How can I know how much bandwidth is consumed by each station on my LAN? I familiar with methods such as NBAR, NetFlow and IP Accounting but none of them provide that particular information. NBAR tells me what applications are running, NetFlow show me which IP is trying to connect to which IP and how many bytes was sent and IP Accounting shows similar information to NetFlow.
But, when some station on my LAN flooding the connection, NBAR is recognizing that somebody is using p2p on the LAN how can I find out which station is actually doing this? I guess that all that comes down to the question how much bandwidth is consumed by each station (hopefully ? station + protocol) but what tool can tell me that?
p.s. btw, if there is some 3-rd party tool (i.e. not performed by Cisco router) that can answer that question I?d like to know about it too ? software or hardware based.
Thanks in advance,
Alex.
03-21-2007 12:42 PM
Have you tried to use the "ip flow-top-talker" command and have it sorted by bytes?
Also, you might want to take a look at Observer from www.networkinstrument.com
hth
hieu
03-23-2007 07:25 AM
If you are using a Netflow analyzer/application then Netflow will tell you how much bandwidth is being consumed by a particular flow, by IP address or by application. The only thing is it is historical and not real time. If you are interested in bandwidth being consumed at the switchport you could use an snmp tool like Orion.
03-23-2007 10:17 AM
you could SNMP the octet counter for each switch port and just create a spreadsheet showing what stations are connected to what ports.
etherpeek by wildpackets is a good tool
03-23-2007 01:53 PM
Hi,
We use a product called Packet Logic. Maybe a little pricy, but it works like a charm. Great for looking, and shaping IP traffic.
Regards - Johan
04-02-2007 12:42 AM
First of all,
I'd like to thank to all the people who participated in this topic (at least viewed the question). Now, some of the suggestions provided here were very-very helpful. But, when your network is suffers from traffic anomalies is this more an art than exact science to find out what's going on? I guess that any LAN/WAN Manager of middle size and above network ran into such a problem in some part of his life - maybe virus outbreak, some route-map that doesn't work as expected maybe some p2p on the LAN - how you solved it guys? Any additional information may be very helpful.
Again, every tool that provides IP + Protocol statistic would be very-very helpful.
Thanks in advance,
Alex.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide