Traffic Analyzer

sumod_jacob
sumod_jacob used Ask the Experts™
on
I am experiencing heavy bandwidth utilization in my internet circuit and file download speed is very low due to heavy traffic. Which is the best tool to find the detailed traffic flow of the specific port in the switch/firewall/router?.
Comment
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
what kind of router/switch.  I would say ideally netflow would be the way to go, but you have to be able to get the data, the other option is wireshark
Get a switch with a mirroring/monitor port and connect a PC running
- iptraf (http://iptraf.seul.org/) [Linux] or
- Wireshark (https://www.wireshark.org/) [Windows/Linux] or
- Microsoft Network Monitor (https://www.microsoft.com/en-us/download/details.aspx?id=4865) [Windows] or
some similar tool in promiscuous mode (to see all traffic).
sumod_jacobSenior IT Manager

Author

Commented:
I have cisco 4500 series switch and ASA 5520 firewall
Expert Spotlight: Joe Anderson (DatabaseMX)

We’ve posted a new Expert Spotlight!  Joe Anderson (DatabaseMX) has been on Experts Exchange since 2006. Learn more about this database architect, guitar aficionado, and Microsoft MVP.

so I would go netflow on either the switch if you are running layer 3 on it or the asa.  Check ManageEngine.com for their netflow analyzer.  You could also use ip flow top-talker to see the which device but no protocol info.  Somethings that is quick as you know what your servers run if they are causing it, like a backup job or something.
William MurrayNetwork Engineer

Commented:
You can use a show connections and look for one with alot of bytes transfereed

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial