measure network traffic per ip

[kolorasta]

I have a lan and I want to have a detailed information about the traffic generated by the differents pcs in a lan

for example
172.16.0.30 -- downstream=500mb / upstream=100mb / Total=600mb

i want to have a pc 24 hs a day sniffin' my network..

whick soft do you recomend...????

i tried Tamosoft CommTraffic...
another suggestion?

 

[KiscoKid]

I predominantly use 3 sniffers (depending on what I'm trying to analyse).

They are Observer, Ethereal and Sniffer.

Of those 3, Ethereal is free and can be downloaded fromt he link below:

http://www.ethereal.com/

What I would say that if you're sniffing around 600mb a second over a 24 hour period, you will need a MEGA hard disk for that .. esp if you want to capture everything.

For exampple, recently I ran a up a 1 Gig trace file on Observer after just 20 minutes of analysis and that was only on a 100mb interface that was less than 10% used.

You may want to do a pre-capture filter albeit I don't like doing that as you may miss something.

 

[kolorasta]

thank you.. i will test them ...

 

[Rookcr]

If you don't want packet brakdown I use solarwinds engineers edition. Requires at least a managed switch. Then I get historical data for as long as I want to keep it for traffic in out errors it is very cool.