Bandwidth Hugers how to find them

Wanted9000
Wanted9000 used Ask the Experts™
on
What software is good to monitor the Bandwidth utilization
I want to know who is consuming the bandwidth
Comment
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
Ken BooneNetwork Consultant

Commented:
So it really depends what equipment you are working with.  Some firewalls will provide this information as far as who is consuming your internet bandwidth, cisco routers will do this - this would be useful for internet as well as private metro-e or mpls connections.  Typically netflow is involved.  The firewall and router can show you this, but there are 3rd party netflow collectors as well.  In this case you have to have equipment that will support netflow.  Scrutinizer make a nice netflow collector as well as solar winds.

If you don't have equipment that supports netflow, then you can use something like NTOPng - which basically spans a port or ports and reports on basically the same type of information.

Author

Commented:
we got a fortigate 100D
firmware ver: v5.2.10,build742
Ken BooneNetwork Consultant

Commented:
Ok I am not familiar with fortigate - I'm a cisco guy ;)  However, you can google whether or not it supports some type of netflow functionality and if it does it might be able to show you the information you want or at least be able to forward netflow data to a netflow collector which will let you look at exactly who is using how much bandwidth at any given time.
Become a Certified Penetration Testing Engineer

This CPTE Certified Penetration Testing Engineer course covers everything you need to know about becoming a Certified Penetration Testing Engineer. Career Path: Professional roles include Ethical Hackers, Security Consultants, System Administrators, and Chief Security Officers.

You may also be able to check on the switch level if you have managed switches?

Author

Commented:
We Have Dell PowerConnect 6248 mnage switches
Install PRTG, free license is unlimited for 30 days, and you can just monitor the ports, assuming we are not talking 1000's.  You can just track down high traffic ports and ID the user.

Not as elegant as netflow, but works in a pinch.  It is a great product to have handy for monitoring or occassional troubleshooting.

The 6248 is layer 3 and supports sflow

A quick google implies that the fortigate can provide the info too, never used one.
bbaoIT Consultant

Commented:
i would first clarify what the author mean by "bandwidth hungers", hungers used most data in a period of past, or hungers requiring high download or upload speed at the moment? they are different apps.

if you are using Windows 10, good news for you is most of the required features are built-in now. if you are looking which apps consumed more data in the past, please check below cNET article.

https://www.cnet.com/au/how-to/monitor-your-data-usage-in-windows-10/

if you concern more about network performance against each app, please check his how-to article

https://askleo.com/how_do_i_monitor_network_activity_on_my_windows_machine/comment-page-1/
Technical Support Specialist
Commented:
There are few options:
1. monitoring through switch
2. monitoring through proxy
3. deploying a network monitoring solution

#2 will work only if you're concerned with WAN traffic. #3 should take care of your entire network.  Give NetCrunch network monitor a shot - here's a video of bandwidth monitoring in action.  You can get very granular information, down to port-by-port analysis on every node.
Bandwidth monitoring in NetCrunch 9

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial