[nsp] Finding the bandwidth hogs

[Brennan_Murphy at NAI.com]

Presumably your WAN router (2600,3600,7X00) is plugged into a 
switch (5000-6000). Span the port over to a Sniffer. Oila. 

That's a simple way to do it. If your environment is more
complicated, spans sessions are precious, etc....there
are other ways to accomplish the same thing--tapping,
etc. 



-----Original Message-----
From: cisco-nsp-bounces at puck.nether.net
[mailto:cisco-nsp-bounces at puck.nether.net] On Behalf Of Christopher
McCrory
Sent: Thursday, September 25, 2003 9:04 AM
To: cisco-nsp at puck.nether.net
Subject: [nsp] Finding the bandwidth hogs


Hello...


	I'm trying to find an easy(er) way to find the local users
hogging a T1 line.  I've used netflow with ntop and ip accounting.  Both
of those were time consuming and the results were hit and miss.  The
problem is too many source<->destination pairs.  I really don't care
about the
remote location, only the local one.   Any ideas?


-- 
Christopher McCrory
 "The guy that keeps the servers running"
 
chrismcc at pricegrabber.com
 http://www.pricegrabber.com
 
Let's face it, there's no Hollow Earth, no robots, and
no 'mute rays.' And even if there were, waxed paper is
no defense.  I tried it.  Only tinfoil works.


_______________________________________________
cisco-nsp mailing list  cisco-nsp at puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/