Solved

How to find the IP address which consumes the network bandwidth in real time ?

Posted on 2016-08-28
16
61 Views
Last Modified: 2016-10-15
People,

I'm just a server support engineer so I have no clue in networking, so I need you help to assist me in what software or technology to find which IP address in my network is consuming the largest bandwidth ?

I have extended the network bandwidth for Guest wireless from 10 MBps to 20 MBps but it is still maxed out.

Note: all of the network switch and WLAN AP are Cisco brand, the Firewall is Juniper brand.

If possible the solution is the freeware ones or not more than $250 in terms of software license.

Thanks
0
Comment
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
16 Comments
 
LVL 23

Assisted Solution

by:yo_bee
yo_bee earned 166 total points
ID: 41773677
You need a utility like solarwinds.
http://www.solarwinds.com/

This gets the Netflow or packets from your switches and gives you reports and graphs of each node on your system. I know this product is not cheap so please do not be fooled about the application being free.  

If you have more than 10 nodes (each computer is a node) than it starts to get costly.

I have not personally found anything free.  

You also need to have knowledge of commands for your network hardware.

Hope this helps.
0
 
LVL 8

Author Comment

by:Senior IT System Engineer
ID: 41773682
Yes yo bee,

I have enabled that technology and then use PRTG in the past but don't know how to interpret ?
0
 
LVL 23

Assisted Solution

by:yo_bee
yo_bee earned 166 total points
ID: 41773687
I am not a network guru, so my knowledge is very limited.  I do know you need to enable monitoring for Netflow. You may want to google that. Also PRTG software is not free over ten devices.

Do you have a actual concern or just trying to be proactive.
0
How our DevOps Teams Maximize Uptime

Our Dev teams are like yours. They’re continually cranking out code for new features/bugs fixes, testing, deploying, responding to production monitoring events and more. It’s complex. So, we thought you’d like to see what’s working for us. Read the use case whitepaper.

 
LVL 46

Assisted Solution

by:Craig Beck
Craig Beck earned 251 total points
ID: 41773695
You don't need solarwinds. You can use the firewall or WLAN.

Your WLAN is Cisco so you can use AVC.
0
 
LVL 30

Expert Comment

by:pgm554
ID: 41773887
Jupiter should have some sort of utility in it's firewall that let's you see who the top ip talkers are ,and where they are connecting too.
0
 
LVL 26

Expert Comment

by:Fred Marshall
ID: 41774060
PRTG will tell you the traffic levels.  Is that good enough?  By switch port so you can narrow down the device.
0
 
LVL 8

Author Comment

by:Senior IT System Engineer
ID: 41774100
Hi All,

This is the problem that occuring intermittently. I've got some Marketing Contractor who uses the Guest Wifi internet which I suspect is downloading and uploading too much of a data.

Netflow has been enabled on the 4x Cisco switch Catalyst 3850 (Core switch at the data center and the HQ office) and then the log is captured in the monitoring server, parsed by PRTG.

But I find it is quite hard to understand the top IP talker with PRTG.

Is there any better alternative that does not cost additional software license to buy perhaps ?
0
 
LVL 46

Expert Comment

by:Craig Beck
ID: 41774175
AVC, like I said. It's built-in to the WLC.
0
 
LVL 8

Author Comment

by:Senior IT System Engineer
ID: 41774198
Craig,

Doyou mean enabling the Cisco Application Visibility and Control (AVC) feature on all the Cisco WLAN ?
0
 
LVL 26

Assisted Solution

by:Fred Marshall
Fred Marshall earned 83 total points
ID: 41774280
Well, PRTG, if set up to show the traffic on each switch port- which is common- will show the traffic on each port.  But if it's in WiFi then that's not as likely.
0
 
LVL 8

Author Comment

by:Senior IT System Engineer
ID: 41774282
Fred Marshall,

yeah that's the thing, the Wifi AP is of course conencted to one of the HQ-Core Switch but the problem is which IP address consuming is another problem to resolve.
0
 
LVL 46

Assisted Solution

by:Craig Beck
Craig Beck earned 251 total points
ID: 41774543
Sure do.  Its function is to give you Application Visibility and Control, and can show you who does what.  It also gives you the ability to restrict certain applications if you want to, and prioritise others.
1
 
LVL 8

Author Comment

by:Senior IT System Engineer
ID: 41775595
OK, upon investigating on the site and looking at the detail of the AP, it is using Cisco Virtual WLC and 9x Cisco Aironet AIR-AP1262N-N-K9 Access Points.

Does it have Cisco Application Visibility and Control (AVC) feature ?
0
 
LVL 8

Assisted Solution

by:Senior IT System Engineer
Senior IT System Engineer earned 0 total points
ID: 41775632
I can see there is something mentioned as AVC

AVC profile
Should I enable it as above ?

and then after I enablethe check box above, I can see some result in the below:
AVC Stats
is that correct ?
0
 
LVL 46

Accepted Solution

by:
Craig Beck earned 251 total points
ID: 41775900
0

Featured Post

Does Powershell have you tied up in knots?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

During and after that shift to cloud, one area that still poses a struggle for many organizations is what to do with their department file shares.
After seeing many questions for JRNL_WRAP_ERROR for replication failure, I thought it would be useful to write this article.
This video shows how to use Hyena, from SystemTools Software, to bulk import 100 user accounts from an external text file. View in 1080p for best video quality.
Michael from AdRem Software explains how to view the most utilized and worst performing nodes in your network, by accessing the Top Charts view in NetCrunch network monitor (https://www.adremsoft.com/). Top Charts is a view in which you can set seve…

728 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question