cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
367
Views
0
Helpful
4
Replies

bandwidth monitoring Forensics

juan-ruiz
Level 1
Level 1

Looking for a command line tool that can show which IP is utilizing most of the bandwidth

I have PRTG running and monitoring the outside interface.

When it spikes to 15 Mbps and sustains for over 10 minutes I get an email. Next step is trying to narrow down who the offenders are

4 Replies 4

Collin Clark
VIP Alumni
VIP Alumni

If you have the ASA5580 you can use Netflow. I believe the ASDM monitor will show you the info as well (on any model). I don't use ASDM so I'm not 100% sure where to look.

Hope that helps.

I'm running 5520 and it does not support netflow

I'm already monitoring the internal interface VLAN with netflow and getting some info

I would like to know if there are any ASA built in commands that would display activity

I'm aware of the show conn but looking for something more specific

Thanks for your input

Not that I've ever heard of. I recently found a product that connects to the ASA and provides the info you're looking for.

www.fireplotter.com

juan-ruiz
Level 1
Level 1

This is great thanks a lot

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: