Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

monitoring bandwidth with PIX

Is there any technique (no matter how primitive) I can use to single out high-bandwidth using private IPs behind my PIX? I am currenty using MRTG and I see a cummulative total of bandwidth usage but I need to know what individual IPs are using the bandwidth.

Thanks,

Diego

15 REPLIES

Re: monitoring bandwidth with PIX

There really isn't much you can do with the PIX in this situation. You do have other options though. You could use MRTG to monitor your switch ports or you could use a sniffer (ie Wireshark) and see who the top talkers are.

HTH

Silver

Re: monitoring bandwidth with PIX

I have a better solution. Replace the Pix

with Checkpoint Firewall. You can do this

with Checkpoint SmartView Monitor and it will

give you just about everything you need,

including top talkers.

CCIE Security

New Member

Re: monitoring bandwidth with PIX

The Wireshark sounds good but I don't have a SPAN capable switch. This would mean trying to find a hub to connect the PIX inside interface and Wireshark machine, no?

Re: monitoring bandwidth with PIX

I'm afraid so.

Gold

Re: monitoring bandwidth with PIX

If you don't have SPAN switch on outside interface you can use hub to get copy of all PIX

traffic to the port. Hook up a machine and run either Ethereal (look for

the top talkers) or run nTop.

http://www.ntop.org/

Re: monitoring bandwidth with PIX

Good idea, but you will probably only see your NAT'd address not the internal IPs.

Gold

Re: monitoring bandwidth with PIX

Re: monitoring bandwidth with PIX

Google 'PIX' and 'logging' and there are some free options out there that might help. I tried PLA once and it looked decent, but the link is currently down. You may need to turn on debug level logging on the PIX for the app to work properly, check the documentation.

New Member

Re: monitoring bandwidth with PIX

Version 8 ASDM gives you top 10 services, talkers and destinations based on IP address, with intervals of 1hr, 8hr and 24hr.

New Member

Re: monitoring bandwidth with PIX

What are the hardware requirements? I have 506 and 515 PIXes running V6.2 and V6.3 images.

Thanks,

Diego

New Member

Re: monitoring bandwidth with PIX

The Pix 506 is not supported, Pix 515 requires 128MB ram for UR licence and 64MB for restricted licence and 16MB flash, see version 8 release notes for further information.

Re: monitoring bandwidth with PIX

Another way is to use th tool Netflow but you should do this in a router pix do not support netflow

New Member

Re: monitoring bandwidth with PIX

Hi,

You could try collecting the syslog data from the PIX and using a reporting tool like Sawmill to generate reports.

See this article:

http://lachniet.com/cheaplogging/

Cheers!

New Member

Re: monitoring bandwidth with PIX

Hello Diego,

try NTOP (http://www.ntop.org/news.html)

best regards,

Paulo Valverde

New Member

Re: monitoring bandwidth with PIX

try this friend

http://www.adventnet.com/

780
Views
27
Helpful
15
Replies
CreatePlease login to create content