We have a small MPLS network made up of 12 remote sites with Internet access being provided from the head-end node.
We are having issues with the bandwidth across the MPLS network being insufficient. We are regularly seeing over 1 Mbit/sec being in use on the interfaces.
What are my options to identify what that traffic is? I have done some research, and it looks like CiscoWorks can do that, but I do not see anywhere that says that specifically.
I know that Cisco's NetFlow allows this sort of granularity, but I do not know how to use that data.
How are you all able to figure out what is being used on your network?
try "ip nbar protocol-discovery" on the interface level. This will not give you the granularity of NetFlow, but will allow you to determine the protocol/application causing the load. You can use "show ip nbar protocol-discovery top-n 10" to show the top 10 with respect to number of packets/bytes.
Other than that I would also check with a sniffer, what kind of traffic is on your network.
Hope this helps!