Network Utilization Stats

Hello, I have a very basic need. Our network seems to be not performing well, possibilty due to the growth in number of clients in the recent past. We are running mail.web.ftp, etc servers. To identify the bottleneck either at the application level or network, I need to look into stats like which service is mostly accessed on my network, which segment has most network utilization, which user in particular is eating up all resources. I appreciate if you could suggest NMS software which can run either on Windows platform or Linux platform. Thanks.

Answer Wiki

Thanks. We'll let you know when a new response is added.

For basic traffic statistics you should set up MRTG to query your switches and routers. It works a little better on linux than on windows. This will tell you where the traffic is assuming you have SNMP aware routers and switches.

Once you know which links have too much traffic you can use a sniffer. If you want to see what is happening to a windows server you can use network monitor.

If you want to sniff the traffic in general the network interface has to be in promiscuous mode. My favorite tool for sniffing is ethereal. It is available for linux and windows. If you just want a graphical display about node to node volume, check out etherape. You might just want to do a search at the sourceforge site for traffic analyzers.

One thing to be aware of, on a switch you need to be on a monitoring port. Otherwise you will see only traffic for your system. When I go to a remote location to sniff traffic I always carry a 10/100 hub with me. This way I can use it to stick my laptop between the node I’m checking and the rest of the net. If you want to do this, beware, most “hubs” being sold today are really switches. I now use a 3com officeconnect 5 port dual speed hub. We tried three times to buy a hub from othe vendors before I found this model. The others were all switches.

Discuss This Question: 1  Reply

There was an error processing your information. Please try again later.
Thanks. We'll let you know when a new response is added.
Send me notifications when members answer or reply to this question.
  • Snapper70
    Some questions that really have to be asked: How large IS the network (# servers/clients)? I presume switched Ethernet - what's at the "core" where the servers are? Does the switch there support spanning? Does it have simple port counters to identify the busiest ports? Does it support SPANning? (Many larger switches; some smaller ones do). Some switches (Cisco 4000, 4500, 6500 running CatOS) have a nifty "sh top" command to give you "TOP TALKERS". Do you have a sniffer? Is there a router involved - if so, what does it separate? Is everything on the same LAN, or do you have remote services on a WAN link (i.e. servers on frame, T1, or better); and do you have basic stats on the router CPU and interface utilization levels?
    920 pointsBadges:

Forgot Password

No problem! Submit your e-mail address below. We'll send you an e-mail containing your password.

Your password has been sent to:

To follow this tag...

There was an error processing your information. Please try again later.

Thanks! We'll email you when relevant content is added and updated.


Share this item with your network: