Advertisement
If you have a new account but are having problems posting or verifying your account, please email us on hello@boards.ie for help. Thanks :)
Hello all! Please ensure that you are posting a new thread or question in the appropriate forum. The Feedback forum is overwhelmed with questions that are having to be moved elsewhere. If you need help to verify your account contact hello@boards.ie

What can I use to show IP thats causing traffic spikes

Options
  • 28-06-2011 11:15am
    #1
    whitelightrider
    Registered Users Posts: 3,100 ✭✭✭


    Folks,

    Is there anything I can put on my network that will tell me what IP address is causing traffic spikes?

    We are using PRTG which shows the spikes, but not the device thats causing it.


Comments

  • Options
    #2
    mecco
    Registered Users Posts: 222 ✭✭mecco


    Would wireshark do it? I think it would but haven't used it in years.

    Their site seems to be down at the moment also so not sure how useful a contribution this is at all!! :)


  • Options
    #3
    FSL
    Registered Users Posts: 1,456 ✭✭✭FSL


    Wireshark will show you all the traffic. You can sort the output by IP address.


  • Options
    #4
    accensi0n
    Registered Users Posts: 2,787 ✭✭✭accensi0n


    whitelightrider wrote: »
    Folks,

    Is there anything I can put on my network that will tell me what IP address is causing traffic spikes?

    We are using PRTG which shows the spikes, but not the device thats causing it.

    Do your network devices support netflow toptalkers?


  • Options
    #5
    ishotjr2
    Registered Users Posts: 134 ✭✭ishotjr2


    There are a few ways to do this.

    1) snmpwalk off the router and you should be able to parse the "transmission" table. Sure there are scripts already for this. Cacti is easy to use also and will do all of it for you.

    2) A linux/BSD bridge, http://www.freshmeat.net will have one. Cannot make any recommandation cause I generally do my own. However this will be a learning curve.


Advertisement