[nsp] Suggestions on tracking down bandwidth offenders

[Jon Lewis]

On Wed, 14 Jul 2004, Tony Mucker wrote:

> I've got a bandwidth problem (who doesn't).  Something has been
> saturating my poor little T1 for 24 hours straight now.  For those of
> you curious, here's what it looks like:
>
> http://www .ghideon.com/router-day.png

Assuming you have a managed switch(es), can't you just look at the traffic
stats for each computer's switch port?

Which direction is which in the image?  i.e. which direction on your T1 is
saturated now?  It looks like there was unusual traffic in the opposite
direction just before things got really bad.  Perhaps one of your systems
has become a warez site or is running PTP file sharing.

----------------------------------------------------------------------
 Jon Lewis                   |  I route
 Senior Network Engineer     |  therefore you are
 Atlantic Net                |
_________ http://www.lewis.org/~jlewis/pgp for PGP public key_________