Monitor gateway network traffic on Server 2008 R2
Posted on 2014-09-10
I would like some recommendations for Network Gateway Monitoring Software that can record how much data has passed through a particular NIC for each IP / MAC address. If it records content, that could be helpful, but not essential.
I am willing to spend some money, but not a lot.
I am having some suspect activity on my Internet Hotspot Network.
My WiFi Gateway is recording excessive downloads to certain users connected to it, but unfortunately my Hotspot Gateway Software does not have the reporting abilities I need to find out what is going on.
Just this morning, 2 users were connected to the AP, had received an IP addresses from the DHCP server, but not logged into the hotspot server, and were transferring data thought the AP. Were not talking KB here, we are talking high MB, almost GB.
The server is Windows Server 2008 R2 running the Firstspot Hotspot Software. 1 NIC for WAN (internet) access and 1 NIC for LAN (hotspot). WiFi AP is a Ubiquiti UniFi AC.
What I need to know: Is the data that is passing through the AP actually internet data (though the gateway), or something else?
For the meantime, I have just blocked the users MAC addresses on the AP.