[ previous ] [ next ] [ threads ]
 From:  Paul Taylor <PaulTaylor at winn dash dixie dot com>
 To:  Nathan Harris <nharris at eoimaging dot com>, m0n0wall at lists dot m0n0 dot ch
 Subject:  RE: [m0n0wall] How to monitor workstation network traffic
 Date:  Wed, 1 Feb 2006 08:11:06 -0500

	If all you want is to see what workstation is using up bandwidth,
you can use the Firewall states table, under the Diagnostics screen in
Monowall.  To see your top talking workstation, you should be able to "Start
New" Snapshot on that screen, near the top.  After that, hit "View Delta".
Then, you'll see the top bandwidth users since you hit "Start New".  Refresh
that screen as much as you like.  

If you want to see what a particular user is doing, just click on their IP
Address (either source or destination) and you'll get a filtered listing of
all their connections.

Note that the firewall states table shows things on a
connection-by-connection basis.  Since this can be constantly changing
(depending on the type of traffic), connections can quickly come and go, so
it may not offer you what you really want.  But, knowing which workstation
is killing you bandwidth is pretty easy with this tool.  It shows the source
and destination addresses and ports, as well as the type of traffic (UDP,
TCP, ESP, ICMP, etc.) along with the packets, bytes, and time-to-live for
each connection.


-----Original Message-----
From: Nathan Harris [mailto:nharris at eoimaging dot com] 
Sent: Tuesday, January 31, 2006 11:52 AM
To: m0n0wall at lists dot m0n0 dot ch
Subject: [m0n0wall] How to monitor workstation network traffic

I need to monitor the network traffic through my m0n0wall from LAN->WAN 
on a workstation by workstation basis.  It would be great to have a 
graphical breakdown by LAN IP over time (RRDTool, MRTG, etc..).  
However, what I really need is a real time tool to track down which 
workstation is consuming WAN resources.

Does anyone know of a solution for this?



To unsubscribe, e-mail: m0n0wall dash unsubscribe at lists dot m0n0 dot ch
For additional commands, e-mail: m0n0wall dash help at lists dot m0n0 dot ch