Data size issue // WLC

[taimoor khan]

Hello Guys,

We have a user who is using 20 GB per hour, I get this data from Cisco Prime infrastructure.

My company is providing 5Mbps speed, is it possible a user (Apple phone) use 20 GB data on 5Mbps?

How we connect wireless:

User----AP----CMTS---Router---WLC---Core

[Scott Fella]

Anything is possible. Maybe he is streaming or downloading. To verify, try doing a download from the same site and see.

Sent from Cisco Technical Support iPhone App

[taimoor khan]

Thanks for reply scott, we can not go onsite as he is a customer. Is there any other way ?

I checked WLC interfaces, maximum data they tranfer (Tx/Rx) is 4Gig per hour but he is using 20Gig an an hour.

is there any other way to find what is he doing ?

[Scott Fella]

Only if you had a proxy or content filter which allows you to capture that info.

Sent from Cisco Technical Support iPhone App

[Leo Laohoo]

Does the site have a router?  If yes, then you can enable Netflow and see where he's going.

You may also want to give the user a call and ask the person.  This way the person know that someone is concerned about a potential abuse of the network.

[George Stefanick · Accepted solution]

Based on what you are saying I have it hard to believe an iPhone is pulling and pushing that much data. That's just me .. Span a port and sniff his traffic ..

Sent from Cisco Technical Support iPad App

[taimoor khan]

Seems like you are correct, we are providing 5Mbps and he can only gets 2.1GB but he is using 20 GB. Can I span WLC port ?

[George Stefanick]

I normally span the switch the wlc connects into. Filter source and add the iPhones MAC address ..

Sent from Cisco Technical Support iPad App

[taimoor khan]

Hello George,

I am able to see what user is doing, he is streaming actually but stange thing is we are giving him 5Mbps and he is consuming 8 Mbps.

[George Stefanick]

What are you using to determine the usage ?

Sent from Cisco Technical Support iPad App

[taimoor khan]

Precera - Packet logic

[George Stefanick]

Do you have a ACL only allowing that 5 meg ? How are limiting this can you explain?

Btw thank you for the rating

Sent from Cisco Technical Support iPad App

[taimoor khan]

We are using ISG to divide the bandwidth, yes we do use ACL for bench of users to get 5Mbps Down and 1.5 Mbps UP.

[George Stefanick]

Is ISG at the edge ? Is it possible the user is generating traffic, your monitor tool is seeing this bandwidth but then it gets dropped at the edge ?

Sent from Cisco Technical Support iPad App

[taimoor khan]

nop the site doesn't have router and I dont think WLC has netflow option.