bandwidth monitoring Forensics

Unanswered Question
Dec 12th, 2008
User Badges:

Looking for a command line tool that can show which IP is utilizing most of the bandwidth


I have PRTG running and monitoring the outside interface.

When it spikes to 15 Mbps and sustains for over 10 minutes I get an email. Next step is trying to narrow down who the offenders are


  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Loading.
Collin Clark Fri, 12/12/2008 - 07:21
User Badges:
  • Purple, 4500 points or more

If you have the ASA5580 you can use Netflow. I believe the ASDM monitor will show you the info as well (on any model). I don't use ASDM so I'm not 100% sure where to look.


Hope that helps.

juan-ruiz Fri, 12/12/2008 - 09:16
User Badges:

I'm running 5520 and it does not support netflow

I'm already monitoring the internal interface VLAN with netflow and getting some info

I would like to know if there are any ASA built in commands that would display activity

I'm aware of the show conn but looking for something more specific

Thanks for your input

Collin Clark Fri, 12/12/2008 - 10:37
User Badges:
  • Purple, 4500 points or more

Not that I've ever heard of. I recently found a product that connects to the ASA and provides the info you're looking for.


www.fireplotter.com





Actions

This Discussion