network monitor

Posted on 2005-05-16
Medium Priority
Last Modified: 2013-12-07
Hi All,
 I have a very simple local network with one adsl router and 10 PC's, How can I know which one of the clients are making a heavy downloading, which slow the network?
 is there any dos command or network tool for this case?

Question by:deyaa
LVL 97

Expert Comment

by:Lee W, MVP
ID: 14013989
If you have a server you might be able to use Network Monitor (administrative tool) to identify the MAC address (but then you'd also need to have a hub and not a switch; most likely you have a switch.  Switches can do this too - if you have an EXPENSIVE managed switch, it's sometimes possible.  Otherwise, I can't think of an alternative right now.
LVL 12

Expert Comment

ID: 14014051
any sniffer will do the trick, you can try ethereal, which is free software.  If your network is in a hub, then you can sniff all the traffic. If you are just in a non-managed switch, you will need to install a hub upstream of the switch (you can get a cheap hub for about 20 bucks these days) - plug the hub into the router, and the switch, and then plug your pc with sniffer installed into the hub as well. You can now sniff all the traffic and get an idea of what machine is doing what.

Although, if it's just a small 10 PC network, you could just go to each machine, and run netstat -A (for windows) and get a list of all active network connections.


Expert Comment

ID: 14014413
If all the PCs are directly connected to the router, my advice is: install a proxy server on one of the computers (or add a new computer to act as just a proxy, a simple PII will do it) and make all Internet traffic flow through it - this way you can impose limits. An easier solution might be installing a traffic monitor/filter like NetLimiter (www.netlimiter.com) on each computer and use it to monitor the traffic flowing from/to each of them.
LVL 79

Expert Comment

ID: 14015661
If you have a switch that is capable of letting you setup a mirror port, or monitoring port, you can download NTOP and let it run for a while. You'd be amazed at the information you can gather..
LVL 79

Accepted Solution

lrmoore earned 750 total points
ID: 14015665
Else, you can enable SNMP on every PC and monitor their network usage using MRTG/PRTG


Featured Post

Identify and Prevent Potential Cyber-threats

Become the white hat who helps safeguard our interconnected world. Transform your career future by earning your MS in Cybersecurity. WGU’s MSCSIA degree program was designed in collaboration with national intelligence organizations and IT industry leaders.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

If you’re involved with your company’s wide area network (WAN), you’ve probably heard about SD-WANs. They’re the “boy wonder” of networking, ostensibly allowing companies to replace expensive MPLS lines with low-cost Internet access. But, are they …
This article is in regards to the Cisco QSFP-4SFP10G-CU1M cables, which are designed to uplink/downlink 40GB ports to 10GB SFP ports. I recently experienced this and found very little configuration documentation on how these are supposed to be confi…
In this tutorial you'll learn about bandwidth monitoring with flows and packet sniffing with our network monitoring solution PRTG Network Monitor (https://www.paessler.com/prtg). If you're interested in additional methods for monitoring bandwidt…
Monitoring a network: why having a policy is the best policy? Michael Kulchisky, MCSE, MCSA, MCP, VTSP, VSP, CCSP outlines the enormous benefits of having a policy-based approach when monitoring medium and large networks. Software utilized in this v…

807 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question