?
Solved

How to find the IP address which consumes the network bandwidth in real time ?

Posted on 2016-08-28
16
Medium Priority
?
74 Views
Last Modified: 2016-10-15
People,

I'm just a server support engineer so I have no clue in networking, so I need you help to assist me in what software or technology to find which IP address in my network is consuming the largest bandwidth ?

I have extended the network bandwidth for Guest wireless from 10 MBps to 20 MBps but it is still maxed out.

Note: all of the network switch and WLAN AP are Cisco brand, the Firewall is Juniper brand.

If possible the solution is the freeware ones or not more than $250 in terms of software license.

Thanks
0
Comment
15 Comments
 
LVL 24

Assisted Solution

by:yo_bee
yo_bee earned 664 total points
ID: 41773677
You need a utility like solarwinds.
http://www.solarwinds.com/

This gets the Netflow or packets from your switches and gives you reports and graphs of each node on your system. I know this product is not cheap so please do not be fooled about the application being free.  

If you have more than 10 nodes (each computer is a node) than it starts to get costly.

I have not personally found anything free.  

You also need to have knowledge of commands for your network hardware.

Hope this helps.
0
 
LVL 8

Author Comment

by:Senior IT System Engineer
ID: 41773682
Yes yo bee,

I have enabled that technology and then use PRTG in the past but don't know how to interpret ?
0
 
LVL 24

Assisted Solution

by:yo_bee
yo_bee earned 664 total points
ID: 41773687
I am not a network guru, so my knowledge is very limited.  I do know you need to enable monitoring for Netflow. You may want to google that. Also PRTG software is not free over ten devices.

Do you have a actual concern or just trying to be proactive.
0
 The Evil-ution of Network Security Threats

What are the hacks that forever changed the security industry? To answer that question, we created an exciting new eBook that takes you on a trip through hacking history. It explores the top hacks from the 80s to 2010s, why they mattered, and how the security industry responded.

 
LVL 47

Assisted Solution

by:Craig Beck
Craig Beck earned 1004 total points
ID: 41773695
You don't need solarwinds. You can use the firewall or WLAN.

Your WLAN is Cisco so you can use AVC.
0
 
LVL 30

Expert Comment

by:pgm554
ID: 41773887
Jupiter should have some sort of utility in it's firewall that let's you see who the top ip talkers are ,and where they are connecting too.
0
 
LVL 26

Expert Comment

by:Fred Marshall
ID: 41774060
PRTG will tell you the traffic levels.  Is that good enough?  By switch port so you can narrow down the device.
0
 
LVL 8

Author Comment

by:Senior IT System Engineer
ID: 41774100
Hi All,

This is the problem that occuring intermittently. I've got some Marketing Contractor who uses the Guest Wifi internet which I suspect is downloading and uploading too much of a data.

Netflow has been enabled on the 4x Cisco switch Catalyst 3850 (Core switch at the data center and the HQ office) and then the log is captured in the monitoring server, parsed by PRTG.

But I find it is quite hard to understand the top IP talker with PRTG.

Is there any better alternative that does not cost additional software license to buy perhaps ?
0
 
LVL 47

Expert Comment

by:Craig Beck
ID: 41774175
AVC, like I said. It's built-in to the WLC.
0
 
LVL 8

Author Comment

by:Senior IT System Engineer
ID: 41774198
Craig,

Doyou mean enabling the Cisco Application Visibility and Control (AVC) feature on all the Cisco WLAN ?
0
 
LVL 26

Assisted Solution

by:Fred Marshall
Fred Marshall earned 332 total points
ID: 41774280
Well, PRTG, if set up to show the traffic on each switch port- which is common- will show the traffic on each port.  But if it's in WiFi then that's not as likely.
0
 
LVL 8

Author Comment

by:Senior IT System Engineer
ID: 41774282
Fred Marshall,

yeah that's the thing, the Wifi AP is of course conencted to one of the HQ-Core Switch but the problem is which IP address consuming is another problem to resolve.
0
 
LVL 47

Assisted Solution

by:Craig Beck
Craig Beck earned 1004 total points
ID: 41774543
Sure do.  Its function is to give you Application Visibility and Control, and can show you who does what.  It also gives you the ability to restrict certain applications if you want to, and prioritise others.
1
 
LVL 8

Author Comment

by:Senior IT System Engineer
ID: 41775595
OK, upon investigating on the site and looking at the detail of the AP, it is using Cisco Virtual WLC and 9x Cisco Aironet AIR-AP1262N-N-K9 Access Points.

Does it have Cisco Application Visibility and Control (AVC) feature ?
0
 
LVL 8

Assisted Solution

by:Senior IT System Engineer
Senior IT System Engineer earned 0 total points
ID: 41775632
I can see there is something mentioned as AVC

AVC profile
Should I enable it as above ?

and then after I enablethe check box above, I can see some result in the below:
AVC Stats
is that correct ?
0
 
LVL 47

Accepted Solution

by:
Craig Beck earned 1004 total points
ID: 41775900
0

Featured Post

 The Evil-ution of Network Security Threats

What are the hacks that forever changed the security industry? To answer that question, we created an exciting new eBook that takes you on a trip through hacking history. It explores the top hacks from the 80s to 2010s, why they mattered, and how the security industry responded.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Wouldn't it be nice if objects in Active Directory automatically moved into the correct Organizational Units? This is what AutoAD aims to do and as a plus, it automatically creates Sites, Subnets, and Organizational Units.
In this article I will be showing you how to subnet the easiest way possible for IPv4 (Internet Protocol version 4). This article does not cover IPv6. Keep in mind that subnetting requires lots of practice and time.
Monitoring a network: why having a policy is the best policy? Michael Kulchisky, MCSE, MCSA, MCP, VTSP, VSP, CCSP outlines the enormous benefits of having a policy-based approach when monitoring medium and large networks. Software utilized in this v…
Monitoring a network: how to monitor network services and why? Michael Kulchisky, MCSE, MCSA, MCP, VTSP, VSP, CCSP outlines the philosophy behind service monitoring and why a handshake validation is critical in network monitoring. Software utilized …

809 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question