Network Analysis Question


My network has about 60 PC.
Internet has a SDSL 4Mo
In normal conditions (and at night when no one is connected) PING to is between 20 to 30 ms
During a download operation it can go to 60 to 150ms and then is goes back to normal 20 to 30 ms

SOmetimes, and that is my problem, it goes to up to 250 to 400ms (saturating Internet bandwith for many hours) and I cannot find the reason. I am sure it comes from a "IP device" (PC, smartphone, tablet..) since when people goes home at 18h and turn off the computers everything is back to normal

ANtivirus is Sophos and uptodate on all PCs

IS there and way, a tool (hardware of software) to point to the IP address while bandwith is saturated (Ping around 250 to 400ms) ? That will help me find the "culprit", the PC which is saturating bandwith

Is there another way to held me identify which PC is saturating the Internet Bandwith?

Can a Smartphone, tablet  (connected in WIFI to the Network) saturate the Internet Bandwith?

Thank you for your help
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Zephyr ICTCloud ArchitectCommented:
Is that 4mbps for 60 users? Probably not too heavy users except for one :)

You might give capsa a try, they have a free version.

You'll have to set the scanner between the firewall and the rest of the network either as tap or on a core switch (using a monitor/span port) that has a direct link to the firewall... This way you might be able to catch the heavy user...
helpfinderIT ConsultantCommented:
it can be also old/bad switch if you have such device in the LAN. Switch could operate normal when low load is going thru it, but problems can occur when higher load is present.
it might be that some PC(s) are infected and making high load when powered on. This you can check by monitoring ping and starting one PC by one.
you can also check on software basis using e.g. proxy, but this is something you have to have configured and set, and it´s not so easy and fast

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
Kamran ArshadIT AssociateCommented:

You need to configure SNMP based NMS to monitor your network. I suggest to start with something free like NTOP, Cacti.
gadsadAuthor Commented:
thanks to all
I just upgraded my internet link and things are bette
I never found out the solution of my problem
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Network Analysis

From novice to tech pro — start learning today.