Want to win a PS4? Go Premium and enter to win our High-Tech Treats giveaway. Enter to Win


Internet Usage (Bandwidth) Monitoring

Posted on 2009-05-15
Medium Priority
Last Modified: 2013-12-07
Here's my situation:  I manage a small (~20 user) network.  All on a single subnet attached to a SonicWALL Pro1260.  WAN connection is a single T1.  From time to time Internet access becomes "slow" (i.e. heavy usage) and this prompts the boss to ask, "WHO is using up the bandwidth?"  

Is there a straight forward way to monitor, in real-time, what bandwidth is being used by each IP address on our LAN?  (Who's browsing a vendor site, who's downloading an iso, who's streaming video -- you get the idea.)
Question by:slattdog
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 3
LVL 13

Assisted Solution

by:Ugo Mena
Ugo Mena earned 2000 total points
ID: 24399012
from within the Sonicwall GUI, go to Firewall section, then to the Connections Monitor. From there you should see the Active Connections Monitor Settings (on top) which will let you filter by IP, source port, etc...

If you just want to see who/what/where all your bandwidth is going, look at the Active Connections Monitor and click on the last column (Rx Bytes) which will sort descending/ascending based on bandwidth usage. From there you should be able to determine who (source IP) what (dest. port) and where (dest. IP) is being downloaded.

Author Comment

ID: 24399089
Thanks ultralites.  That is what I have been doing.  I would like something more graphical that would show me what percentage of the T1 is being used by a specific user (PC) and would update real-time so that I could monitor it easier.
LVL 13

Accepted Solution

Ugo Mena earned 2000 total points
ID: 24399859
Ok. For that type of graphical representation, you would either need to enable (buy) the Viewpoint add on from SonicWall or implement your own syslog server...

SonicWALL® ViewPoint" is an easy-to-use Web-based reporting tool that fully complements and extends SonicWALLs security products and services. Comprehensive reporting capabilities provide administrators with instant insight into the health of their network including both performance and security. Using both a customizable dashboard and a variety of historical reports, SonicWALL ViewPoint helps organizations of all sizes track network utilization, monitor security activity and view Web usage. (http://www.sonicwall.com/us/products/6031.html)

If you are not interested in spending the money for the sonicwall solution (can be pricey), you can use any number of available syslog servers and just have your firewall send its messages to that instead. Pretty much the same results but may not be as nice graphically ( check out www.kiwisyslog.com and or http://www.netal.com/sl4nt.htm)
Concerto's Cloud Advisory Services

Want to avoid the missteps to gaining all the benefits of the cloud? Learn more about the different assessment options from our Cloud Advisory team.


Author Comment

ID: 24415212
I'm giving Viewpoint a whirl.  Great reporting!  Not sure about the real-time data yet.  

I have the Kiwi Syslog, and no problem collecting data, but quite honestly most of it doesn't mean a lot to me.  I am just running the free version.  Is there any sort of an add-on that would help me analyze the data?  I don't see, for example, any way to translate all the information it is giving me into actual bandwidth being utilized, etc.

Thanks again!
LVL 13

Expert Comment

by:Ugo Mena
ID: 24415969
not totally sure, but I think you can use Viewpoint to analyze any/all syslogs, just point your device to the Viewpoint server as its syslog server.

Author Comment

ID: 24416755
Thanks ultralites.  I'll have to play around with it for a while -- but this should get me going in the right direction anyway.

Featured Post

NFR key for Veeam Agent for Linux

Veeam is happy to provide a free NFR license for one year.  It allows for the non‑production use and valid for five workstations and two servers. Veeam Agent for Linux is a simple backup tool for your Linux installations, both on‑premises and in the public cloud.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Introduction Many times we come across a slowness or instability between two hosts, and almost always we blame the poor networking guys, just because they're an easy target.  Sometimes we forget that other factors including disk bottlenecks, CPU …
I. Introduction There's an interesting discussion going on now in an Experts Exchange Group — Attachments with no extension (http://www.experts-exchange.com/discussions/210281/Attachments-with-no-extension.html). This reminded me of questions tha…
In this tutorial you'll learn about bandwidth monitoring with flows and packet sniffing with our network monitoring solution PRTG Network Monitor (https://www.paessler.com/prtg). If you're interested in additional methods for monitoring bandwidt…
NetCrunch network monitor is a highly extensive platform for network monitoring and alert generation. In this video you'll see a live demo of NetCrunch with most notable features explained in a walk-through manner. You'll also get to know the philos…
Suggested Courses

636 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question