Internet Usage (Bandwidth) Monitoring

Posted on 2009-05-15
Last Modified: 2013-12-07
Here's my situation:  I manage a small (~20 user) network.  All on a single subnet attached to a SonicWALL Pro1260.  WAN connection is a single T1.  From time to time Internet access becomes "slow" (i.e. heavy usage) and this prompts the boss to ask, "WHO is using up the bandwidth?"  

Is there a straight forward way to monitor, in real-time, what bandwidth is being used by each IP address on our LAN?  (Who's browsing a vendor site, who's downloading an iso, who's streaming video -- you get the idea.)
Question by:slattdog
  • 3
  • 3
LVL 13

Assisted Solution

by:Ugo Mena
Ugo Mena earned 500 total points
ID: 24399012
from within the Sonicwall GUI, go to Firewall section, then to the Connections Monitor. From there you should see the Active Connections Monitor Settings (on top) which will let you filter by IP, source port, etc...

If you just want to see who/what/where all your bandwidth is going, look at the Active Connections Monitor and click on the last column (Rx Bytes) which will sort descending/ascending based on bandwidth usage. From there you should be able to determine who (source IP) what (dest. port) and where (dest. IP) is being downloaded.

Author Comment

ID: 24399089
Thanks ultralites.  That is what I have been doing.  I would like something more graphical that would show me what percentage of the T1 is being used by a specific user (PC) and would update real-time so that I could monitor it easier.
LVL 13

Accepted Solution

Ugo Mena earned 500 total points
ID: 24399859
Ok. For that type of graphical representation, you would either need to enable (buy) the Viewpoint add on from SonicWall or implement your own syslog server...

SonicWALL® ViewPoint" is an easy-to-use Web-based reporting tool that fully complements and extends SonicWALLs security products and services. Comprehensive reporting capabilities provide administrators with instant insight into the health of their network including both performance and security. Using both a customizable dashboard and a variety of historical reports, SonicWALL ViewPoint helps organizations of all sizes track network utilization, monitor security activity and view Web usage. (

If you are not interested in spending the money for the sonicwall solution (can be pricey), you can use any number of available syslog servers and just have your firewall send its messages to that instead. Pretty much the same results but may not be as nice graphically ( check out and or
Microsoft Certification Exam 74-409

Veeam® is happy to provide the Microsoft community with a study guide prepared by MVP and MCT, Orin Thomas. This guide will take you through each of the exam objectives, helping you to prepare for and pass the examination.


Author Comment

ID: 24415212
I'm giving Viewpoint a whirl.  Great reporting!  Not sure about the real-time data yet.  

I have the Kiwi Syslog, and no problem collecting data, but quite honestly most of it doesn't mean a lot to me.  I am just running the free version.  Is there any sort of an add-on that would help me analyze the data?  I don't see, for example, any way to translate all the information it is giving me into actual bandwidth being utilized, etc.

Thanks again!
LVL 13

Expert Comment

by:Ugo Mena
ID: 24415969
not totally sure, but I think you can use Viewpoint to analyze any/all syslogs, just point your device to the Viewpoint server as its syslog server.

Author Comment

ID: 24416755
Thanks ultralites.  I'll have to play around with it for a while -- but this should get me going in the right direction anyway.

Featured Post

PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Issues with NAT and UDP 2 67
Wireshark coloring help 4 56
Places to advertise 6 33
fb messenger security and privacy 15 56
It is a common problem that often server suffers from the lack of space on system volume. Old servers or new ones from vendors come with preformatted small volume - 5-6GB in total and after installing updates or applications the free space on system…
Today, still in the boom of Apple, PC's and products, nearly 50% of the computer users use Windows as graphical operating systems. If you are among those users who love windows, but are grappling to keep the system's hard drive optimized, then you s…
This video gives you a great overview about bandwidth monitoring with SNMP and WMI with our network monitoring solution PRTG Network Monitor ( If you're looking for how to monitor bandwidth using netflow or packet s…
In this tutorial you'll learn about bandwidth monitoring with flows and packet sniffing with our network monitoring solution PRTG Network Monitor ( If you're interested in additional methods for monitoring bandwidt…

786 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question