Internet Usage (Bandwidth) Monitoring

Posted on 2009-05-15
Last Modified: 2013-12-07
Here's my situation:  I manage a small (~20 user) network.  All on a single subnet attached to a SonicWALL Pro1260.  WAN connection is a single T1.  From time to time Internet access becomes "slow" (i.e. heavy usage) and this prompts the boss to ask, "WHO is using up the bandwidth?"  

Is there a straight forward way to monitor, in real-time, what bandwidth is being used by each IP address on our LAN?  (Who's browsing a vendor site, who's downloading an iso, who's streaming video -- you get the idea.)
Question by:slattdog
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 3
LVL 13

Assisted Solution

by:Ugo Mena
Ugo Mena earned 500 total points
ID: 24399012
from within the Sonicwall GUI, go to Firewall section, then to the Connections Monitor. From there you should see the Active Connections Monitor Settings (on top) which will let you filter by IP, source port, etc...

If you just want to see who/what/where all your bandwidth is going, look at the Active Connections Monitor and click on the last column (Rx Bytes) which will sort descending/ascending based on bandwidth usage. From there you should be able to determine who (source IP) what (dest. port) and where (dest. IP) is being downloaded.

Author Comment

ID: 24399089
Thanks ultralites.  That is what I have been doing.  I would like something more graphical that would show me what percentage of the T1 is being used by a specific user (PC) and would update real-time so that I could monitor it easier.
LVL 13

Accepted Solution

Ugo Mena earned 500 total points
ID: 24399859
Ok. For that type of graphical representation, you would either need to enable (buy) the Viewpoint add on from SonicWall or implement your own syslog server...

SonicWALL® ViewPoint" is an easy-to-use Web-based reporting tool that fully complements and extends SonicWALLs security products and services. Comprehensive reporting capabilities provide administrators with instant insight into the health of their network including both performance and security. Using both a customizable dashboard and a variety of historical reports, SonicWALL ViewPoint helps organizations of all sizes track network utilization, monitor security activity and view Web usage. (

If you are not interested in spending the money for the sonicwall solution (can be pricey), you can use any number of available syslog servers and just have your firewall send its messages to that instead. Pretty much the same results but may not be as nice graphically ( check out and or
Connect further...control easier

With the ATEN CE624, you can now enjoy a high-quality visual experience powered by HDBaseT technology and the convenience of a single Cat6 cable to transmit uncompressed video with zero latency and multi-streaming for dual-view applications where remote access is required.


Author Comment

ID: 24415212
I'm giving Viewpoint a whirl.  Great reporting!  Not sure about the real-time data yet.  

I have the Kiwi Syslog, and no problem collecting data, but quite honestly most of it doesn't mean a lot to me.  I am just running the free version.  Is there any sort of an add-on that would help me analyze the data?  I don't see, for example, any way to translate all the information it is giving me into actual bandwidth being utilized, etc.

Thanks again!
LVL 13

Expert Comment

by:Ugo Mena
ID: 24415969
not totally sure, but I think you can use Viewpoint to analyze any/all syslogs, just point your device to the Viewpoint server as its syslog server.

Author Comment

ID: 24416755
Thanks ultralites.  I'll have to play around with it for a while -- but this should get me going in the right direction anyway.

Featured Post

Independent Software Vendors: We Want Your Opinion

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

In this article we have discussed the manual scenarios to recover data from Windows 10 through some backup and recovery tools which are offered by it.
PRTG Network Monitor lets you monitor your bandwidth usage, so you know who is using up your bandwidth, and what they're using it for.
There's a multitude of different network monitoring solutions out there, and you're probably wondering what makes NetCrunch so special. It's completely agentless, but does let you create an agent, if you desire. It offers powerful scalability …
Michael from AdRem Software outlines event notifications and Automatic Corrective Actions in network monitoring. Automatic Corrective Actions are scripts, which can automatically run upon discovery of a certain undesirable condition in your network.…

707 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question