Wan Traffic Analysis

Unanswered Question
May 14th, 2007
User Badges:

Hello all,

Is there any tools which can be used to monitor traffic on a T1 WAN link? For example, what programs and services are causing the most data traffic, are there any large data transfers taking place on the line (if so, what is the source and destination i.p's, etc etc


  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
mohammedmahmoud Mon, 05/14/2007 - 12:08
User Badges:
  • Green, 3000 points or more


You can use ip cache flow under the internet interface "ip route-cache flow", and then use show ip cache flow.

HTH, please do rate all helpful replies,

Mohammed Mahmoud.

paolo bevilacqua Mon, 05/14/2007 - 12:41
User Badges:
  • Super Gold, 25000 points or more
  • Hall of Fame,

    Founding Member

Then for the easier access to netflow data choose a management tool like prtg or solarwinds that can use the netflow data export function on the router.

tprendergast Mon, 05/14/2007 - 14:09
User Badges:
  • Silver, 250 points or more

Check out ethereal (free packet sniffer)... Your best bet is to capture traffic coming into the LAN interface of your edge router. This traffic is going to be destined for the internet (usually), and you can get a good idea of what is on the way out. You could use a tap and capture traffic going onto the T1 circuit, but it is a bit more painful to do.

Ethereal will classify traffic by source ip, destination ip, and ports. You can identify major bandwidth eaters very quickly.



PS -- Other great products that do this, but on a retail basis: Network Instruments Observer, Sniffer Pro, etc.

danny9797 Tue, 05/15/2007 - 11:05
User Badges:

Hi and thanks for the responses.

I decided to start fooling around with ethereal. It works great but it only sniffs packets on the local computer interface.

How can I snif packets on the router interfaces from a PC on the network? Is it possible b/c the local traffic on my pc is useless to me.

Thanks again

Craig Norborg Tue, 05/15/2007 - 20:08
User Badges:
  • Bronze, 100 points or more

I have to agree that a Netflow program (NetQoS, Solarwinds Orion, etc) is the best for this by far. Actually the new Solarwinds toolset is coming out soon (v8) which will have a small Netflow tool in it too, you can get a free 30 day trial for this.


This Discussion