Koozali.org: home of the SME Server

IP/Bandwidth monitor

Bob Meyers

IP/Bandwidth monitor
« on: September 01, 2003, 09:02:25 PM »
I recently had a task to track down an infected PC (WellChia virus) that was hogging all the bandwidth on a T-1. In desperation (and panic)I used netstat variations to learn the IP address of the hog.

Is there a better bandwidth/network hog monitor for interactively monitoring traffic on an SME server? I searched this forum and found a reference to "ntop", but posts were 3 years old.

Anyone have a favorite monitor technique to share?

Byte

Re: IP/Bandwidth monitor
« Reply #1 on: September 01, 2003, 09:39:29 PM »
you could use iptraf you can find rpm on http://rpmfind.com

and few other people use others cant rember off top my head but if you take a trip over to http://contribs.org you can find a few others.

Hope this points you in the right direction at least

Walter Padgett

Re: IP/Bandwidth monitor
« Reply #2 on: September 01, 2003, 11:24:44 PM »
Good Afternoon,

1. You can use Mr. May's contrib for NTOP at http://mirror.contribs.org/smeserver/contribs/dmay/mitel/contrib/ntop/
2. You can use Mr. Bharda's contrib for netprob at http://mirror.contribs.org/smeserver/contribs/cbharda/howto/netprobe-howto.htm
3. Read this thread concerning IPTraf http://forums.contribs.org/index.php?topic=17927.msg70198#msg70198

I've looked at IPTraf but I haven't looked at netprobe. IPTraf has a good interface.

Later

Wally