[nsp] Suggestions on tracking down bandwidth offenders

[joshua sahala]

On (14/07/04 10:24), Tony Mucker wrote:
> 
> I've got a bandwidth problem (who doesn't).  Something has been 
> saturating my poor little T1 for 24 hours straight now.  For those of 
> you curious, here's what it looks like:
> 
> http://www .ghideon.com/router-day.png
> 
> Remove the white space and enjoy.  In the past I've used ethereal dumps 
> to figure out who the big talkers were, but frankly it takes too long to 
> crunch all the packets.  I've also tried etherApe, but the analysis 
> makes my poor little laptop crawl.  Are there any tools out there that 
> will speed this up?  Possibly by looking at the firewall logs?
> 

depends on what kind of firewall you have - there are scripts for
various firewalls, providing you have some sort of accounting turned
on.  for your router you can do some basic accounting too.  either
using netflow or ip accouting.  google for top talkers scripts for
each

/joshua
-- 
A common mistake that people make when trying to design something 
completely foolproof is to underestimate the ingenuity of complete
fools.
	- Douglas Adams -

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: Digital signature
Url : https://puck.nether.net/pipermail/cisco-nsp/attachments/20040714/874e506c/attachment.bin