Solved

How to check ?

Posted on 2002-04-11
5
206 Views
Last Modified: 2010-04-17
Have any command or any approaches on Router can I check if someone is downloading files ? Or I can check whether what anyone is doing ?

As I ask , it is because I observe that on the router interface ( sh interface command ) fill up with many traffics. And I don't know who is downloading something.

Thanks and Regards.
0
Comment
Question by:leumas
5 Comments
 

Author Comment

by:leumas
ID: 6933632
I forgot to tell that I'm using Cisco 2600 series.And have ISDN interface.
0
 
LVL 79

Accepted Solution

by:
lrmoore earned 10 total points
ID: 6935447
you can assign an access list to the Ethernet interface to log all traffic:

Interface Eth 0/0
 ip access-group 101 in

access-list 101 permit ip any any log
logging buff 4096

router# show log

The log will tell you which IP address is doing what, but only to the threshold of the buffer. If you have a syslog server, it will be better to send the logs over to it:


logging <IP add of syslog server>

Else, you could use a sniffer (Ethereal is free) to see who's doing what

0
 

Expert Comment

by:elcidd
ID: 6938322
I agree with lrmoore, you can set up logging to see what traffic is comming and going from what ip.  However, I would like to caution that this takes up valuable router proccessor time.  I believe the best solution is to use a sniffer.  You can find a few at www.webattack.com . but lrmoore seemed to hit it pretty much on the head
0
 
LVL 1

Expert Comment

by:ymash
ID: 6943465
This is more comlicated but you can setup something like MRTG on your switches and monitor traffic on every port.
0
 
LVL 16

Expert Comment

by:SteveJ
ID: 6948475
Is this a web site that's being accessed?

ymash, I think leumas knows which interface is in volume trouble. Besides, MRTG will only show you adjusted volumes of traffic but not who is creating the traffic volume. lrmoore's idea is pretty straightforward but if you think the excess traffic is in downloads, I'd create an access list on port 21 and log that traffic. Ultimately, you may need to trap all network traffic.

Ethereal will work well if the entire media is shared (hubbed) or if you can create a monitor port on the switch.

Good luck.
Steve
0

Featured Post

Control application downtime with dependency maps

Visualize the interdependencies between application components better with Applications Manager's automated application discovery and dependency mapping feature. Resolve performance issues faster by quickly isolating problematic components.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This article is a guide to configure bridging on Cisco Routers.  This is something I never knew was possible until after making a few phone calls to Cisco.  Using bridging saved our company money by not requiring us to purchase a new switch.  Bridgi…
Problem Description:   Couple of months ago we upgraded the ADSL line at our branch office from Home to Business line. The purpose of transforming the service to have static public IP’s. We were in need for public IP’s to publish our web resour…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…

895 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

15 Experts available now in Live!

Get 1:1 Help Now