Solved

Slow Internet Connection

Posted on 2008-06-24
8
235 Views
Last Modified: 2013-12-14
We have a T1 (1.5 Mbits Down/1.5 Mbits UP)...We have a SonicWall TZ-170.
We are experiencing extremely slow internet browsing and ran a test at www.speedtest.net, with the following results:

Download = 1.3 Mbits
Upload = 38 Kbits

I am suspecting that someone might be downloading something from us, or someone is uploading something.

Anyways, what are the different ways that I can track down what is going on. What computer is uploading, etc.

Anyone more familiar with SonicWall, if there are any utilities that I can run there? Any help would be appreciate it. I have very limited experience with SonicWall Firewalls.
0
Comment
Question by:pzozulka
  • 3
  • 3
  • 2
8 Comments
 
LVL 12

Expert Comment

by:nsx106052
Comment Utility
You could use ethereal or wire shark to sniff information on the network.  Both are free programs.  I would recommend installing the software on a gateway to monitor all traffic.  You can also look at your switches/routers and look which activity lights are blinking link crazy and try troubleshooting from there.  
0
 
LVL 7

Expert Comment

by:mabutterfield
Comment Utility
What type of router is outside the firewall?  
0
 
LVL 8

Author Comment

by:pzozulka
Comment Utility
Cisco 1700 Series Router
0
 
LVL 8

Author Comment

by:pzozulka
Comment Utility
How would I go about putting WireShark on the gateway, if my gateway is a SonicWall Firewall and my router is a Cisco 1700. WireShark is only for Windows/Linux, and some other OS.
0
Enabling OSINT in Activity Based Intelligence

Activity based intelligence (ABI) requires access to all available sources of data. Recorded Future allows analysts to observe structured data on the open, deep, and dark web.

 
LVL 7

Accepted Solution

by:
mabutterfield earned 500 total points
Comment Utility
I would recommend monitoring the utilization on the 1700 router first.  

Look at the output of 'show interface <serial int name>'

Look at the reliability, txload, and rxload.  

sample:
 MTU 1500 bytes, BW 100000 Kbit, DLY 100 usec,
     reliability 255/255, txload 1/255, rxload 1/255


The txload and rxload will tell you how much of the bandwidth is being used.  If your upload speed is tested at 38kbits, and it should be 1544kbits, then the txload will probably be above 200/255.  

You can continually check throughout the day, or you can use several different programs that use netflow, and/or SNMP to monitor the system for you.  If you'd like additional information let me know.

Regarding wireshark, you would need to put a hub between the router and firewall, or firewall and internal network, and plug the two devices and a laptop into it.  Run wireshark on the laptop, and it will monitor the traffic.  Or you could use a managed switch, and setup a mirror (span) port

router <------->hub(not switch) <-------> firewall
                              |-------->laptop with wireshark


Wireshark would be better at telling you WHAT is being transfered, while the counters on the interface will tell you HOW MUCH is being transfered.

good luck, and let me know how it goes.
0
 
LVL 12

Expert Comment

by:nsx106052
Comment Utility
This link will help you find the software you want to download a program for your Cisco router to monitor bandwidth.
http://www.experts-exchange.com/Networking/Network_Management/Network_Analysis/Q_23228406.html?sfQueryTermInfo=1+cacti+cisco
0
 
LVL 7

Expert Comment

by:mabutterfield
Comment Utility
nsx106052, that's a nice list.  Thanks for the post.

I would also like to add that I've used the products from Advent Net several times.  They have a free 30-day trial on most of their software, and some of it can be run for free for non-commercial use. (i run at home to tinker with my stuff).

NetFlow Analyzer will give you all sorts of pretty bars/charts/graphs of your network traffic.

http://manageengine.adventnet.com/products/netflow/index.html
0
 
LVL 8

Author Closing Comment

by:pzozulka
Comment Utility
I went with the HUB idea between Router & Firewall. Thanks for the tip.
0

Featured Post

What Should I Do With This Threat Intelligence?

Are you wondering if you actually need threat intelligence? The answer is yes. We explain the basics for creating useful threat intelligence.

Join & Write a Comment

I recently had the displeasure of buying a new firewall at one of the buildings I play Sys Admin at. I had to get a better firewall than the cheap one that I had there since I was reconnecting the main office to the satellite office via point-to-poi…
Hi All,  Recently I have installed and configured a Sonicwall NS220 in the network as a firewall and Internet access gateway. All was working fine until users started reporting that they cannot use the Cisco VPN client to connect to the customer'…
This video shows how to remove a single email address from the Outlook 2010 Auto Suggestion memory. NOTE: For Outlook 2016 and 2013 perform the exact same steps. Open a new email: Click the New email button in Outlook. Start typing the address: …
You have products, that come in variants and want to set different prices for them? Watch this micro tutorial that describes how to configure prices for Magento super attributes. Assigning simple products to configurable: We assigned simple products…

743 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

15 Experts available now in Live!

Get 1:1 Help Now