Learn how to a build a cloud-first strategyRegister Now


Network Analysis

Posted on 2007-07-23
Medium Priority
Last Modified: 2010-03-05
I would like to run an analysis of the current bandwidth usage for a local school.  They are running alot of streaming video and have introduced Smartboards and Distance Learning(video conferencing).

I am concerned that we will run out of bandwidth and it will have a negative impact on the devices we are using.

Is there a good free or low cost program out there that will monitor the bandwidth usage for short and long periods of time, and then output that information in the form of a statistical report?
Question by:goeden
LVL 25

Accepted Solution

Cyclops3590 earned 500 total points
ID: 19552515
depends on how your network is setup and the devices you have.  I swear by Ntop.  
Linux: http://www.ntop.org/
Windows: http://www.openxtra.co.uk/freestuff/ntop-xtra.php

This can tell you what clients are using the network, how much bandwidth they are taking up, how long their sessions have been going on, what each protocol (configured by port monitoring) takes up, what servers are being communicated with, etc.

Very nice tool.  The way I use it is I have a managed switch.  I mirror all the traffic of the port that the firewall is plugged into to the monitoring server.  I'm told you can use NetFlow as well, but I haven't used that route before so can't help if you need to use that method

Expert Comment

ID: 19552573
modern network appliances make it really hard to get an idea of your total internal network capacity because non-blocking switching means that any node on the network can only see traffic that is sent to its ip range. You need to find the bottlenecks on your network, be that links between switches or internet bandwitdth or individual machines and measure at those specific points in the network.
LVL 25

Expert Comment

ID: 19552595
I believe that's where NetFlow is suppose to come in, of course the network device must have that ability
Independent Software Vendors: We Want Your Opinion

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

LVL 57

Assisted Solution

giltjr earned 500 total points
ID: 19553042
As Cyclops3590 has suggested, NTOP is great for this type of function.  If you have a device that supports NetFlow you don't have to do the port mirroring.  I have used NTOP with NetFlow (Cisco 6500's).  It basically "summirizes" the traffic and sends to NTOP which interperts it.  "Host A" sent/received X number of bytes over port 80/24555 to "Host B"/  You do not see every packet with NetFlow, just the summary.

If you do not have a device that support NetFlow, then you can do one of the following:

1) Mirror ports that carry the traffic you want to want, requires managed switch.
2) Connect the devices you want to monitor and the computer running NTOP to a HUB.  This is cheaper than getting a managed switch if you don't have one, but depending on the traffic could cause performance problems.  A hub will change duplex from full to half, which in high volume situtations can reduce performance.  By high volume I mean that you are pushing 100 Mbps Eithernet to 70 Mbps or higher.
3) If you don't care about what type of traffic is accouting for the network traffic and your switch is managed, get MRTG and just do SNMP queries on the ports you are interested in.
LVL 25

Expert Comment

ID: 19553129
giltrjr mentioning MRTG made me think of another piece of software: Nagios.
what I do for my internet link is monitoring it with Nagios using ping monitoring.  RTT gets too large and I get a warning.  Look at MRTG to see which interface is getting maxed out at the time, then open up the appropriate Ntop instance to find the specific abusing host and see if their bandwidth usage is legit or not.  If not, then collect all data, kill session, and track down user to inform them the misuse has been logged with HR.
Just saying what I do anyway.

Expert Comment

ID: 19553891
Ntop is really a good software for this purpose.

Author Comment

ID: 19672381
I will test out these options and let you know what works for me.  Thanks for the help.

Featured Post

Important Lessons on Recovering from Petya

In their most recent webinar, Skyport Systems explores ways to isolate and protect critical databases to keep the core of your company safe from harm.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

In this article I will be showing you how to subnet the easiest way possible for IPv4 (Internet Protocol version 4). This article does not cover IPv6. Keep in mind that subnetting requires lots of practice and time.
LinkedIn blogging is great for networking, building up an audience, and expanding your influence as well. However, if you want to achieve these results, you need to work really hard to make your post worth liking and sharing. Here are 4 tips that ca…
Get a first impression of how PRTG looks and learn how it works.   This video is a short introduction to PRTG, as an initial overview or as a quick start for new PRTG users.
Monitoring a network: why having a policy is the best policy? Michael Kulchisky, MCSE, MCSA, MCP, VTSP, VSP, CCSP outlines the enormous benefits of having a policy-based approach when monitoring medium and large networks. Software utilized in this v…

810 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question