?
Solved

Internet Usage (Bandwidth) Monitoring

Posted on 2009-05-15
6
Medium Priority
?
434 Views
Last Modified: 2013-12-07
Here's my situation:  I manage a small (~20 user) network.  All on a single subnet attached to a SonicWALL Pro1260.  WAN connection is a single T1.  From time to time Internet access becomes "slow" (i.e. heavy usage) and this prompts the boss to ask, "WHO is using up the bandwidth?"  

Is there a straight forward way to monitor, in real-time, what bandwidth is being used by each IP address on our LAN?  (Who's browsing a vendor site, who's downloading an iso, who's streaming video -- you get the idea.)
0
Comment
Question by:slattdog
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 3
6 Comments
 
LVL 13

Assisted Solution

by:Ugo Mena
Ugo Mena earned 2000 total points
ID: 24399012
from within the Sonicwall GUI, go to Firewall section, then to the Connections Monitor. From there you should see the Active Connections Monitor Settings (on top) which will let you filter by IP, source port, etc...

If you just want to see who/what/where all your bandwidth is going, look at the Active Connections Monitor and click on the last column (Rx Bytes) which will sort descending/ascending based on bandwidth usage. From there you should be able to determine who (source IP) what (dest. port) and where (dest. IP) is being downloaded.
0
 

Author Comment

by:slattdog
ID: 24399089
Thanks ultralites.  That is what I have been doing.  I would like something more graphical that would show me what percentage of the T1 is being used by a specific user (PC) and would update real-time so that I could monitor it easier.
0
 
LVL 13

Accepted Solution

by:
Ugo Mena earned 2000 total points
ID: 24399859
Ok. For that type of graphical representation, you would either need to enable (buy) the Viewpoint add on from SonicWall or implement your own syslog server...

SonicWALL® ViewPoint" is an easy-to-use Web-based reporting tool that fully complements and extends SonicWALLs security products and services. Comprehensive reporting capabilities provide administrators with instant insight into the health of their network including both performance and security. Using both a customizable dashboard and a variety of historical reports, SonicWALL ViewPoint helps organizations of all sizes track network utilization, monitor security activity and view Web usage. (http://www.sonicwall.com/us/products/6031.html)

If you are not interested in spending the money for the sonicwall solution (can be pricey), you can use any number of available syslog servers and just have your firewall send its messages to that instead. Pretty much the same results but may not be as nice graphically ( check out www.kiwisyslog.com and or http://www.netal.com/sl4nt.htm)
0
Microsoft Certification Exam 74-409

Veeam® is happy to provide the Microsoft community with a study guide prepared by MVP and MCT, Orin Thomas. This guide will take you through each of the exam objectives, helping you to prepare for and pass the examination.

 

Author Comment

by:slattdog
ID: 24415212
I'm giving Viewpoint a whirl.  Great reporting!  Not sure about the real-time data yet.  

I have the Kiwi Syslog, and no problem collecting data, but quite honestly most of it doesn't mean a lot to me.  I am just running the free version.  Is there any sort of an add-on that would help me analyze the data?  I don't see, for example, any way to translate all the information it is giving me into actual bandwidth being utilized, etc.

Thanks again!
0
 
LVL 13

Expert Comment

by:Ugo Mena
ID: 24415969
not totally sure, but I think you can use Viewpoint to analyze any/all syslogs, just point your device to the Viewpoint server as its syslog server.
0
 

Author Comment

by:slattdog
ID: 24416755
Thanks ultralites.  I'll have to play around with it for a while -- but this should get me going in the right direction anyway.
0

Featured Post

 [eBook] Windows Nano Server

Download this FREE eBook and learn all you need to get started with Windows Nano Server, including deployment options, remote management
and troubleshooting tips and tricks

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

In this tutorial I will show you with short command examples how to obtain a packet footprint of all traffic flowing thru your Juniper device running ScreenOS. I do not know the exact firmware requirement, but I think the fprofile command is availab…
Many network operators, engineers, and administrators do not take several factors into consideration when troubleshooting network throughput and latency issues.  They often  measure the throughput by performing a measurement  by transferring a large…
Here's a very brief overview of the methods PRTG Network Monitor (https://www.paessler.com/prtg) offers for monitoring bandwidth, to help you decide which methods you´d like to investigate in more detail.  The methods are covered in more detail in o…
NetCrunch network monitor is a highly extensive platform for network monitoring and alert generation. In this video you'll see a live demo of NetCrunch with most notable features explained in a walk-through manner. You'll also get to know the philos…
Suggested Courses

801 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question