[ previous ] [ next ] [ threads ]
 From:  "Jason Collins" <jason at mammothcomputers dot com>
 To:  <m0n0wall at lists dot m0n0 dot ch>
 Subject:  RE: [m0n0wall] How to track what's taking up the bandwidth?
 Date:  Sat, 15 Jul 2006 13:59:45 -0500
toms hardware /networking just did a review of Omnipeek personal and
they seemed to like it.  I haven't tried it yet, but it looks good from
the review.  They compared it to the wireshark (ethereal) program
mentioned previously.


Hope it helps.


-----Original Message-----
From: Chris Buechler [mailto:cbuechler at gmail dot com] 
Sent: Friday, July 14, 2006 9:49 PM
Cc: m0n0wall at lists dot m0n0 dot ch
Subject: Re: [m0n0wall] How to track what's taking up the bandwidth?

On 7/14/06, Chuck Mariotti <cmariotti at xunity dot com> wrote:
> So, I need to desperately find out where the hell my bandwidth is 
> going...
> How can I easily find out which machines on my network going through 
> my Monowall is using up all the bandwidth?

I'd recommend checking out ntop.  Easy way to get it going would be to
use the virtual appliance here:
http://www.vmware.com/vmtn/appliances/directory/388  Not Windows, but
easy to run VMware Player or Server on Windows and run it that way.

On the switch m0n0wall's LAN is connected to, you'll need to mirror
m0n0wall's LAN port to the port the ntop machine is running on.  If you
don't have a managed switch, you'll have to connect a hub or network tap
between m0n0wall and your internal network and plug the ntop machine
into that.