Is their a bandwidth monitoring tool? (real time)

[shadowfax1066]

We use the PIX 515, the new firewire is very useful just to see how the firewall's bandwidth is doing on the DMZ and Internet, however do you know a tool that can tell us was user or IP addresses are taking up the bandwidth? Can I cheekily ask if you know of a tool that can do this in real time. Sometime the bandwidth will peak out but we have no idea who is doing it....

 

[themut]

You need a protocol analyzer to achieve this task. There are tons available on the net so you need to investigate the one that suits your needs and budget.

 

[br0ck]

take a look at this for long term monitoring

http://www.jffnms.org

 

[flauret]

hi

for that you can use netiq with firewall suite. this software make some reporting uderstandable by anybody like the management and also show you the best talker that go through you firewall. for that you need to keep all your log with a syslog. for sure it is not at all real time.

if you want to know something in realtime, you may use something like a sniffer. sniffer pro is pretty helpful with the possibility to see in real tim who use the more the network. but the necessity should be really important beceause the prices is quite high.

you can have also something else under linux: iptraf. you should see who(what ip) do what or with who on your network.

these last two software ask you to do switch mirroring port or to work with a hub.


frederic

 

[wybnormal]

The PDM of the PIX with newer code will give very close to real-time of ouside and inside interfaces plus memory and CPU. Or you can use Solarwinds which works very well and can also capture the data for trending.

MikeS

http://www.packetattack.com

http://www.packetpress.net

Home of the book "Network Security Using Linux"