105 pts.
 Track USER of Computer online who is using max. Bandwidth in lacal area connection
Hi All,

I am sandeep and working at one software company as system admninstrator. company has 60 user (computer) . we have 2 mb lise line . it go through cisco router. and all computer default gatway ip is the router ip. we have ISA server .
Now i want to online moniter this network that which computer or which user is using most bandwidth using existing setup of any Free software software that show online network useing diagram from last 1 mint to last 3 month. i was search for this in google but i only found network moniternig software that show only one computer on interface informantion. So place Help me for this i am very upset for this.
ASKED: Sep 3, 2008  9:06 AM GMT
UPDATED: February 19, 2009  6:02:25 PM GMT
5,395 pts.

Answer Wiki:
ntop is a great solution for this. However, you will need to either mirror the switch port going to the router or install a network tap. See my blogs about using a network tap.

Blog 1
Blog 2
Blog 3
Blog 4
Blog 5

You can find some liveCD's with ntop on it. Check out the Network Security Toolkit

Is this what you were looking for?Yes No
yasirirfan:
Since you need to monitor the bandwidth the best tool for this which is easily available and easy to configure is MRTG. As you are using Router,swicthes and firewall you can enable SNMP and the configure MRTG to monitor the bandwidth. It provides you a graph of bandwidth usage for every 5 minutes which can be also scheduled for any time (for for every 2 minutes). Here is the link for MRTG and the tools required http://oss.oetiker.ch/mrtg/
active perl http://aspn.activestate.com/ASPN/Downloads/ActivePerl/ MRTG tutorials http://www.netmon.org/dummies.htm and sample online MRTG link If you want more details please let me know.

Also you try cacti which is more efficient than MRTG .You can download from here & now its easier to install.
http://forums.cacti.net/about14946.html

Also check my blog from more details on cacti
Cheers


Yasir
Last Wiki Answer Submitted:  Sep 4, 2008  1:03 AM (GMT)  by  Yasirirfan   5,395 pts.
Latest Answer Wiki Contributors:  Labnuke99   32,405 pts.
To see other answers submitted to the Answer Wiki View Answer History.
Discuss This Question:
_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _




 

Hi Kapadane,

Take a look at MRTG ( http://oss.oetiker.ch/mrtg/ ), it could do the task for you. I’m not sure, however, that the your task could be accomplished by SNMP polling of the cisco router - unless you can set the individual IP counters and SNMP-poll them on the router.

If you can’t set and poll such counters, probably you’ll have to put a linux box between cisco and your internal network, set the counters as iptable rules in a “counter chain” and benefit from MRTG ability to use a shell script output instead of SNMP data - this is described in documentation of MRTG, and some sample polling scripts come with the documentation (in contrib directory).

You can see some samples of such iptables/MRTG usage at http://www.bio.bas.bg/stats/

BR,

Petko

 3,060 pts.

 

I like the Cymphonix boxes. They give very detailed reports to where a user goes and have much data they are using.
It goes inline with your internet connection.
It will also allow you to throttle back each user to a set speed so no one person can max out your internet pipe.

 555 pts.

 

For this situation I’ve found WildPacket’s OmniPeek to work very well. It has a “monitor” mode that can show top talkers, top protocols, etc.

 9,195 pts.