Solved

View network traffice

Posted on 2014-04-09
12
265 Views
Last Modified: 2014-04-14
I have several SMB networks with basic layout of

ISP (Modem) --- SonicWALL -- Switch -- Clients

Some of the sites I do not have access to the SonicWALL's, is there a hardware device that I can plug into the switch to see which computer is using the most bandwidth? I have seen a few network taps, but I do not know enough about them to find what I am look for.

I would like to be able to plug a device into the switch and have it port to my computer or create a graphic pie chart that tells me the host names, IP's of the computers that are running traffic across the line.

Or if there is a some software I can install on my laptop and then I plug into the switch that would work as well.

Thanks!
0
Comment
Question by:JasonDuncanworks
  • 5
  • 4
  • 3
12 Comments
 
LVL 7

Expert Comment

by:Lee Ingalls
ID: 39988986
Your Sonicwall should show bandwidth usage by client... see attached.
Depending on the model you can see in the Log section under reports - bandwidth usages by IP address.
sonicwall.pdf
0
 
LVL 5

Author Comment

by:JasonDuncanworks
ID: 39988996
Thank you for that, but there are several sites that I cannot access the SW and that is why I need a separate device. Something I can almost monitor in real time.
0
 
LVL 7

Expert Comment

by:Lee Ingalls
ID: 39989026
Do you have a VPN or RDP/TS connection to the remote sites?
0
 
LVL 5

Author Comment

by:JasonDuncanworks
ID: 39989058
No vpn but I can get access to a machine on the LAN.
0
 
LVL 7

Expert Comment

by:Lee Ingalls
ID: 39989190
but I can get access to a machine on the LAN.
Sorry, I'm not trying to be difficult... Does this network belong to you/yours to admin?
ISP (Modem) --- SonicWALL -- Switch -- Clients
If you have access to a computer on the LAN... wouldn't you then have access to that sites Sonicwall?
0
 
LVL 5

Author Comment

by:JasonDuncanworks
ID: 39989219
For these few site, the software vendor has control over the SW. Its a tractor place and they have to vpn in to the vendor site. I ask for access to it, but they tell the customers if I log in to it, they take no responsibility and will not support them if an issue arises now or in the future.

Even if I had access to the SW, there are several other site I have that use home based routers for there business. I am just looking for an easier way to track down potential bandwidth hogs.
0
Maximize Your Threat Intelligence Reporting

Reporting is one of the most important and least talked about aspects of a world-class threat intelligence program. Here’s how to do it right.

 
LVL 7

Assisted Solution

by:Lee Ingalls
Lee Ingalls earned 150 total points
ID: 39989290
I use Wireshark in addition to the SonicWall tools.
http://www.wireshark.org/download.html

Select an interface and start a capture...
Select Statistics - Conversations - IPv4 or IPv6...
Sort by Bytes

You need a NIC that supports promiscuous mode. Full network traffic capture can be tricky with Wireshark.

Another free option is Nirsoft TrafficView.
http://www.nirsoft.net/utils/network_traffic_view.html
0
 
LVL 35

Expert Comment

by:Kimputer
ID: 39990193
Since you don't have access to the Sonicwall, you have to insert something in front of it (a NIC with promiscuous mode isn't sufficient, as the traffic is still protected by the switches):

ISP (Modem) --- SonicWALL -- (old hub or managed switch with port mirroring) -- Switch -- Clients

So you do have to interupt the network traffic (if you time it well, takes about 1 second).

Connect one cable from the switch to the old hub or managed switch with port mirroring. Also connect your laptop to this hub/switch (if hub, doesn't matter which port, if managed switch, use the configured 2 ports with the mirror function enabled). Then another cable in any other port, back to the Sonicwall.

Now you can use any capture tool to view ALL outgoing traffic (internal traffic doesn't pass through here though). Wireshark would be nice, as you can sort on the highest user with Statistics > Endpoints > click on IPv4 or TCP tab > sort Bytes column. (Conversations will show multiple same IP's, which may confuse you and still not get the hightest user)
0
 
LVL 5

Author Comment

by:JasonDuncanworks
ID: 39993066
Kimputer,

Attached is a picture of what I think your are talking about. Please try to keep the laughter down I know its not to scale.
Layout.png
0
 
LVL 35

Accepted Solution

by:
Kimputer earned 350 total points
ID: 39993074
Yes, if your switch clearly states it supports port mirroring, enable it for the port with your customer switch, and the port for your laptop (in your picture, the second and third port, counting from left right down)
Actually, if you can also enable it for the first and third port (firewall/laptop), will have the same result.
0
 
LVL 5

Author Comment

by:JasonDuncanworks
ID: 40000117
0
 
LVL 35

Expert Comment

by:Kimputer
ID: 40000211
Seems that's exactly what you need.
0

Featured Post

How to run any project with ease

Manage projects of all sizes how you want. Great for personal to-do lists, project milestones, team priorities and launch plans.
- Combine task lists, docs, spreadsheets, and chat in one
- View and edit from mobile/offline
- Cut down on emails

Join & Write a Comment

Suggested Solutions

This tutorial will go through the steps required to write a script that will back up the configuration settings of a HP-ProCurve switch. You will need to get the following things to follow this tutorial: Telnet Scripting Tool e.g. TST10.exe …
I eventually solved a perplexing problem setting up telnet for a new switch.  I installed a new Cisco WS-03560X-24P switch connected to an existing Cisco 4506 running a WS-X4013-10GE Sup II-Plus. After configuring vlans and trunking,  I could no…
It is a freely distributed piece of software for such tasks as photo retouching, image composition and image authoring. It works on many operating systems, in many languages.
Excel styles will make formatting consistent and let you apply and change formatting faster. In this tutorial, you'll learn how to use Excel's built-in styles, how to modify styles, and how to create your own. You'll also learn how to use your custo…

759 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

20 Experts available now in Live!

Get 1:1 Help Now