Windows 2003 - How to tell who is using the most disk time

I have users frequently tell me that the server is slow. Is there a way to view who is transmitting data to and from the server at any given time?
LVL 1
katredrumAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

EricIT ManagerCommented:
Start off with perfmon and determine the bottleneck.
Is it network, memory, cpu or disk I/o's
What is slow?  a file share? database etc?
To my knowledge the only way is to buy an expensive sniffer that will analize all the IP traffic.
A free version but much harder to use exists called etherreal which was renamed to wireshark.
http://www.wireshark.org/
 
it is not near as easy to use as something like network observer.. but uses the same techinques.
0
EricIT ManagerCommented:
I mentioned it 2nd because there is a good chance its not your network maxing out.
 
0
katredrumAuthor Commented:
ecszone, I only notice that the slowness occurs when someone is either writing or reading a large file to the file server.
I wish there was a something that would show something similar to the Shared Folders -> Sessions view but maybe have a bandwidth monitor by user. It would be nice to know who is taxing the server at any particular time.
I believe the CPU, memory, hard drive, & network is okay, only when someone transfers a large file. I am trying to pinpoint who is doing this. I am familiar with etherreal and do not have that kind of time to go through each packet.
0
Get expert help—faster!

Need expert help—fast? Use the Help Bell for personalized assistance getting answers to your important questions.

mtzmindCommented:
YOU CAN USE  PACHETAGE SNIFFING PROGRAMS  OR EVEN  NETWORK MONITOR PROGRAM
TO VIEW ALL TRAFFIC OCCOURS AT YOUR NETWORK
YOU CNA FILTER THE NETWORK MONITOR TO CERTIN COMPUTER AS YOUR SERVER
KIND REGARDS
MOHAMED ZAIED
MCSE + SECURITY
0
katredrumAuthor Commented:
mtzmind, you are correct! I was wondering if there was an easy way to do this. I was hoping there would be a perfmon counter that I could check instead of packet sniffing.
Would anyone be able to recommend a GUI type bandwidth monitor that specifically shows who is connecting and how much bandwidth they are using?
0
mtzmindCommented:
NETWORK MONITOR CAN DO THIS  
TRY IT
IT CAN BE USED AS ALARM TOO
0
EricIT ManagerCommented:
I agree.  Which is why wireshark sucks.
better programs sort it out for you.
you could demo network observer maybe.
 
if its large files it coul still be your HD.
could also check your switches if they are managed switches.. See if any ports are having excesive collisions
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows Server 2003

From novice to tech pro — start learning today.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.