asked on

Who is using Network and broadband surfing

Hello

I need to know who is using the broadband ( person or computer )and who is getting the rest of us surfing soo slow

We have a 3com base line switch 2426pwr plus ( 3c16491) to allow VOip I, and 3com phones ( 3101 basic ) I heard about snnifer or something like that witchWe can see exactly as grafic who is transmitting with how
in addition we have a Cisco router 1800

Regards

SysExpert

I would see about turning on logging on the Router or using a proxy server.
If you have a firewall besides the router, you can also get logs.

Ethereal is a packet sniffer. Recently changed it's name. do a google search for it.

I hope this helps !

Les Moore

Since you have a Cisco router, I suggest setting up NTOP on a PC
http://www.openxtra.co.uk/freestuff/ntop-xtra.php
Then enable NetFlow on the router and export the flow data to the NTOP PC

myin68

This link from Cisco has an extensive explanation about how NetFlow works in Cisco equipment. It also list commercial and free NetFlow analyzers. It might be overwhelming, and if so just skip to the 2 paragraphs below this one for more direct instructions on how to accomplish your goal.
http://www.cisco.com/en/US/products/ps6601/products_white_paper0900aecd80406232.shtml

I currently use ManageEngine NetFlow Analyzer 5 (they have a free version that allow you to monitor up to 2 interfaces). http://manageengine.adventnet.com/products/netflow/help/cisco-netflow/netflow-ios-versions.html

You'll have to configure your Cisco 1700 to export netflow data to a PC/Server where you've installed the netflow analyzer. Using the analyzer you'll be able to determine who's using all the bandwidth by application and IP address. This link explains how to configure the Cisco to export netflow data... http://manageengine.adventnet.com/products/netflow/help/cisco-netflow/cisco-ios-netflow.html

jmsienrique

ASKER

Ok and how do i open netflow on the cisco 1800?

Les Moore

router(config)#interface FastEthernet 0/1
router(config-if)#ip route-cache flow
router(config-if)#exit
router(config)#ip flow-export destination 192.168.9.101 2055
router(config)#ip flow-export source FastEthernet 0/1
router(config)#ip flow-export version 5

Destination IP is your NTOP PC and port 2055 is the default port for NTOP to listen on

jmsienrique

ASKER

Ok Irmoore

I am so slow please be patience, first i connect to the Cisco router trough a cable
Later i logon as administrator.
Later the question Do I type exactly

router(config)#interface FastEthernet 0/1
router(config-if)#ip route-cache flow
router(config-if)#exit
router(config)#ip flow-export destination 192.168.9.101 2055
router(config)#ip flow-export source FastEthernet 0/1
router(config)#ip flow-export version 5
to save is:
copy run start
or
write memory
Is it ok

ASKER CERTIFIED SOLUTION

Les Moore

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

jmsienrique

ASKER

Well well

first I want to say you thanks a lot, because it is working now and I started to recieved a lot of information that now i need to understand and know how i need to read it,

all your steps ans intructions where easy to follow
finally would you mind telling me how I could get rid off this changes in the future, or how could I change the lisen port for another tool ( as ManageEngine NetFlow Analyzer ) because my manager want use another.

Regards from Mexico and I really apprecciate your help

I really dont have any idea bout how does it work cisco but i will try to do my best.