Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 214
  • Last Modified:

How to check ?

Have any command or any approaches on Router can I check if someone is downloading files ? Or I can check whether what anyone is doing ?

As I ask , it is because I observe that on the router interface ( sh interface command ) fill up with many traffics. And I don't know who is downloading something.

Thanks and Regards.
0
leumas
Asked:
leumas
1 Solution
 
leumasAuthor Commented:
I forgot to tell that I'm using Cisco 2600 series.And have ISDN interface.
0
 
lrmooreCommented:
you can assign an access list to the Ethernet interface to log all traffic:

Interface Eth 0/0
 ip access-group 101 in

access-list 101 permit ip any any log
logging buff 4096

router# show log

The log will tell you which IP address is doing what, but only to the threshold of the buffer. If you have a syslog server, it will be better to send the logs over to it:


logging <IP add of syslog server>

Else, you could use a sniffer (Ethereal is free) to see who's doing what

0
 
elciddCommented:
I agree with lrmoore, you can set up logging to see what traffic is comming and going from what ip.  However, I would like to caution that this takes up valuable router proccessor time.  I believe the best solution is to use a sniffer.  You can find a few at www.webattack.com . but lrmoore seemed to hit it pretty much on the head
0
 
ymashCommented:
This is more comlicated but you can setup something like MRTG on your switches and monitor traffic on every port.
0
 
SteveJCommented:
Is this a web site that's being accessed?

ymash, I think leumas knows which interface is in volume trouble. Besides, MRTG will only show you adjusted volumes of traffic but not who is creating the traffic volume. lrmoore's idea is pretty straightforward but if you think the excess traffic is in downloads, I'd create an access list on port 21 and log that traffic. Ultimately, you may need to trap all network traffic.

Ethereal will work well if the entire media is shared (hubbed) or if you can create a monitor port on the switch.

Good luck.
Steve
0

Featured Post

Receive 1:1 tech help

Solve your biggest tech problems alongside global tech experts with 1:1 help.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now