[ previous ] [ next ] [ threads ]
 
 From:  Nathan Harris <nharris at eoimaging dot com>
 To:  Paul Taylor <PaulTaylor at winn dash dixie dot com>
 Cc:  m0n0wall at lists dot m0n0 dot ch
 Subject:  Re: [m0n0wall] How to monitor workstation network traffic
 Date:  Wed, 01 Feb 2006 08:28:26 -0500
Thanks Paul!  This is exactly what I needed to solve my immediate problem.

And thanks to everyone else who responded.  I'm giving ntop a real close 
look as future solution.  It appears to be a very powerful tool.

Thanks again,

-Nathan

-------- Original Message  --------
From: Paul Taylor <PaulTaylor at winn dash dixie dot com>
To: Nathan Harris <nharris at eoimaging dot com>, m0n0wall at lists dot m0n0 dot ch
Subject: Re:[m0n0wall] How to monitor workstation network traffic
Date: 2/1/2006 8:11 AM
> Nathan,
>
> 	If all you want is to see what workstation is using up bandwidth,
> you can use the Firewall states table, under the Diagnostics screen in
> Monowall.  To see your top talking workstation, you should be able to "Start
> New" Snapshot on that screen, near the top.  After that, hit "View Delta".
> Then, you'll see the top bandwidth users since you hit "Start New".  Refresh
> that screen as much as you like.  
>
> If you want to see what a particular user is doing, just click on their IP
> Address (either source or destination) and you'll get a filtered listing of
> all their connections.
>
> Note that the firewall states table shows things on a
> connection-by-connection basis.  Since this can be constantly changing
> (depending on the type of traffic), connections can quickly come and go, so
> it may not offer you what you really want.  But, knowing which workstation
> is killing you bandwidth is pretty easy with this tool.  It shows the source
> and destination addresses and ports, as well as the type of traffic (UDP,
> TCP, ESP, ICMP, etc.) along with the packets, bytes, and time-to-live for
> each connection.
>
> Paul
>
> -----Original Message-----
> From: Nathan Harris [mailto:nharris at eoimaging dot com] 
> Sent: Tuesday, January 31, 2006 11:52 AM
> To: m0n0wall at lists dot m0n0 dot ch
> Subject: [m0n0wall] How to monitor workstation network traffic
>
> I need to monitor the network traffic through my m0n0wall from LAN->WAN 
> on a workstation by workstation basis.  It would be great to have a 
> graphical breakdown by LAN IP over time (RRDTool, MRTG, etc..).  
> However, what I really need is a real time tool to track down which 
> workstation is consuming WAN resources.
>
> Does anyone know of a solution for this?
>
> Thanks,
>
> -Nathan
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: m0n0wall dash unsubscribe at lists dot m0n0 dot ch
> For additional commands, e-mail: m0n0wall dash help at lists dot m0n0 dot ch
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: m0n0wall dash unsubscribe at lists dot m0n0 dot ch
> For additional commands, e-mail: m0n0wall dash help at lists dot m0n0 dot ch
>
>