Re: Measure amount of network usage

Trendkill wrote:
On May 27, 7:07 am, Andre Wisniewski <andre.wisniew...@xxxxxx> wrote:
hhs wrote:
Hi
Is there any of Cisco feature that let me measure the amount of
network usage per user or per ip address.
For example: I have 10 computer on my LAN, what can i do if i want to
know, let say pc01 use how many Mb per period of time? Is it possible
to do it?
Thanks,
hhs
Hi

netflow is adequate to this task. Let's have a look athttp://www.cisco.com/en/US/prod/collateral/iosswrel/ps6537/ps6555/ps6...

With ip accounting it's much to difficult to investigate. You had to sum up all lines
for an specific ip and you can't see which traffic flows because no ports are shown
in accounting. Another problem is that you can't find out when traffic was generated
unless you do a clear ip accounting, let's say, every minute.

Andre

Netflow is not bad, but it is usually hard to have a chart/graph of
traffic over time for a single IP. If you just want to manage the
heavy hitters and see how a particular link or path is being utilized
throughout the day (like most of us do),

everytime i wanted to know which users is utilizating my links i also wanted to know with what services.

the netflow is second to
none, but if you just want an idea of who is doing what, netflow
probably isn't the best tool for that. I also definitely agree with
your comments about scalability of accounting and the lack of ability
to easily refine the reports.

.... and you'll come to the point where you need to.

If you had a tool like Solarwinds (not
cheap, but should be other free options out there), it will use SNMP
strings to poll a device. Basically you would need to setup snmp on
the switch and/or router, but you must remember that measurement of
bandwidth would be done at layer 2 in this solution, not layer 3, By
setting up a SNMP string, you can then use a tool like solarwinds to
'poll' the router by using an interface IP and the correct read or
write string. When you connect to the router/switch, Solarwinds asks
you which interfaces you would like to poll or watch, and then what
kind of graph to create (1 min avg, 5 min avg, etc). This would allow
you to graph each switchport on the switch (you would need to resolve

i do not like the idea to poll switchports especially on switches with many clients connected to - as i use (up to 200 ports per switch). In most cases traffic is increased to bad levels on wan links so i need to know what's going on in there.
The router's port is the common point.

what IPs/systems are on what ports the manual way with show arp |
include and show cam or show mac-address-table.

MRTG is free and runs on linux and works in very much the same way.
You just need to remember that no matter what, these are averages and
not actual down to the second traffic levels (unless you use the
bandwidth meter portion). Polling a router every second can cause
performance degradation, so using a 1 or 5 minute average usually gets

for our company 1 minute averages aren't dispersed enough, btw. we are serving exchange application. For most users these are good values, though.

a ballpark of what you are looking for.

You can google any of these solutions for configuration examples and/
or software options.

netflow can provide you with more detailed information as you can get with mrtg and i think sooner or later you'll need them.

To find out how much traffic one PC is generating, netflow is oversized, of course.

Andre
.

Relevant Pages

  • Re: Measure amount of network usage
    ... netflow is adequate to this task. ... With ip accounting it's much to difficult to investigate. ... the switch and/or router, but you must remember that measurement of ... you to graph each switchport on the switch (you would need to resolve ...
    (comp.dcom.sys.cisco)
  • Re: sharing a firewall?
    ... so we can all share one dial-up connection. ... and the switch should provide better performance. ... Networks" or "File and printer sharing for Microsoft Networks" to the modem! ... Maybe a Google search on "dial-up router" might turn up others. ...
    (microsoft.public.windowsxp.network_web)
  • Re: sharing a firewall?
    ... so we can all share one dial-up connection. ... and the switch should provide better performance. ... Networks" or "File and printer sharing for Microsoft Networks" to the modem! ... Maybe a Google search on "dial-up router" might turn up others. ...
    (microsoft.public.security)
  • Re: probably an easy routing question, so please help
    ... based router - so you are covered. ... but local comms goes via the L3 switch. ... No - or not if you design it properly. ... both /28s are configured on the same Enet port, with proxy ARP enabled. ...
    (comp.dcom.sys.cisco)
  • Re: Ethernet network wiring ?s
    ... >>> Thanks for the help and network education. ... your router will assign all 5 computers unique IP ... >> even if there are several cascaded ethernet switches and only one cable ... >> switch in that room. ...
    (comp.sys.mac.hardware.misc)