I am looking to see what can I use other than netflow to monitor bandwidth. In other words, How can I tell whether traffic is generated internally or is it an ISP issue?
I can implement the netflow top-talkers but I am not exactly sure what is a lot and what is normal usage. How can I differentiate that? What if I do “show interface fa0/0 for ex. What am I looking at there and what numbers should be treated as normal? And what numbers are beyond normal usage?