Solved

Internet Usage (Bandwidth) Monitoring

Posted on 2009-05-15
6
429 Views
Last Modified: 2013-12-07
Here's my situation:  I manage a small (~20 user) network.  All on a single subnet attached to a SonicWALL Pro1260.  WAN connection is a single T1.  From time to time Internet access becomes "slow" (i.e. heavy usage) and this prompts the boss to ask, "WHO is using up the bandwidth?"  

Is there a straight forward way to monitor, in real-time, what bandwidth is being used by each IP address on our LAN?  (Who's browsing a vendor site, who's downloading an iso, who's streaming video -- you get the idea.)
0
Comment
Question by:slattdog
  • 3
  • 3
6 Comments
 
LVL 13

Assisted Solution

by:Ugo Mena
Ugo Mena earned 500 total points
ID: 24399012
from within the Sonicwall GUI, go to Firewall section, then to the Connections Monitor. From there you should see the Active Connections Monitor Settings (on top) which will let you filter by IP, source port, etc...

If you just want to see who/what/where all your bandwidth is going, look at the Active Connections Monitor and click on the last column (Rx Bytes) which will sort descending/ascending based on bandwidth usage. From there you should be able to determine who (source IP) what (dest. port) and where (dest. IP) is being downloaded.
0
 

Author Comment

by:slattdog
ID: 24399089
Thanks ultralites.  That is what I have been doing.  I would like something more graphical that would show me what percentage of the T1 is being used by a specific user (PC) and would update real-time so that I could monitor it easier.
0
 
LVL 13

Accepted Solution

by:
Ugo Mena earned 500 total points
ID: 24399859
Ok. For that type of graphical representation, you would either need to enable (buy) the Viewpoint add on from SonicWall or implement your own syslog server...

SonicWALL® ViewPoint" is an easy-to-use Web-based reporting tool that fully complements and extends SonicWALLs security products and services. Comprehensive reporting capabilities provide administrators with instant insight into the health of their network including both performance and security. Using both a customizable dashboard and a variety of historical reports, SonicWALL ViewPoint helps organizations of all sizes track network utilization, monitor security activity and view Web usage. (http://www.sonicwall.com/us/products/6031.html)

If you are not interested in spending the money for the sonicwall solution (can be pricey), you can use any number of available syslog servers and just have your firewall send its messages to that instead. Pretty much the same results but may not be as nice graphically ( check out www.kiwisyslog.com and or http://www.netal.com/sl4nt.htm)
0
Connect further...control easier

With the ATEN CE624, you can now enjoy a high-quality visual experience powered by HDBaseT technology and the convenience of a single Cat6 cable to transmit uncompressed video with zero latency and multi-streaming for dual-view applications where remote access is required.

 

Author Comment

by:slattdog
ID: 24415212
I'm giving Viewpoint a whirl.  Great reporting!  Not sure about the real-time data yet.  

I have the Kiwi Syslog, and no problem collecting data, but quite honestly most of it doesn't mean a lot to me.  I am just running the free version.  Is there any sort of an add-on that would help me analyze the data?  I don't see, for example, any way to translate all the information it is giving me into actual bandwidth being utilized, etc.

Thanks again!
0
 
LVL 13

Expert Comment

by:Ugo Mena
ID: 24415969
not totally sure, but I think you can use Viewpoint to analyze any/all syslogs, just point your device to the Viewpoint server as its syslog server.
0
 

Author Comment

by:slattdog
ID: 24416755
Thanks ultralites.  I'll have to play around with it for a while -- but this should get me going in the right direction anyway.
0

Featured Post

NFR key for Veeam Backup for Microsoft Office 365

Veeam is happy to provide a free NFR license (for 1 year, up to 10 users). This license allows for the non‑production use of Veeam Backup for Microsoft Office 365 in your home lab without any feature limitations.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

One good source is the manufacturer's web site. Even though the device operating system is changing, the hardware isn't. Going to the support site and looking at the Vista drivers provides a starting point for identifying system hardware for which d…
In this tutorial I will show you with short command examples how to obtain a packet footprint of all traffic flowing thru your Juniper device running ScreenOS. I do not know the exact firmware requirement, but I think the fprofile command is availab…
Here's a very brief overview of the methods PRTG Network Monitor (https://www.paessler.com/prtg) offers for monitoring bandwidth, to help you decide which methods you´d like to investigate in more detail.  The methods are covered in more detail in o…
In this tutorial you'll learn about bandwidth monitoring with flows and packet sniffing with our network monitoring solution PRTG Network Monitor (https://www.paessler.com/prtg). If you're interested in additional methods for monitoring bandwidt…

839 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question