Guest User!

You are not Sophos Staff.

This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

How to catch high bandwidth users

I think several users are maxing out our T1 which causes slow internet use for everyone, but I'm having lots of trouble trying to find them. At night, backup servers run and when I look at the Accounting report, my backup servers are always at the top.
Is there a way to shorten the time frame of the Accounting Report? 
What strategies are there to see who's using all the bandwidth during a short time frame, like in the current minute or hour?

Thanks in advance.


This thread was automatically locked due to age.
Parents
  • You can get a snapshot of the traffic across the various interfaces using iftop:



     secure:/home/login # iftop -i eth0
                        1.91Mb              3.81Mb              5.72Mb              7.63Mb        9.54Mb
    └───────────────────┴───────────────────┴───────────────────┴───────────────────┴───────────────────
    a204-2-160-17.deploy.akamaitechnolo  => ri-goodman.************x.com         2.44Mb  3.21Mb  3.18Mb
                                          172.25.129.47                         107Kb   224Kb   238Kb
                                          172.25.129.109                       81.7Kb   123Kb  58.1Kb
                                          ri-jwood-d630                        39.5Kb   131Kb   108Kb
                                          172.25.129.48                           0b    100Kb  35.9Kb
                                          ri-madoop.************x.com           448Kb  89.6Kb  32.0Kb
                                          ri-zlee.************x.com            1.63Kb  84.5Kb  90.4Kb
                                          172.25.129.92                           0b   76.0Kb  75.6Kb
                                          ri-madoop.************x.com           384Kb  76.7Kb  27.4Kb
                                         
Reply
  • You can get a snapshot of the traffic across the various interfaces using iftop:



     secure:/home/login # iftop -i eth0
                        1.91Mb              3.81Mb              5.72Mb              7.63Mb        9.54Mb
    └───────────────────┴───────────────────┴───────────────────┴───────────────────┴───────────────────
    a204-2-160-17.deploy.akamaitechnolo  => ri-goodman.************x.com         2.44Mb  3.21Mb  3.18Mb
                                          172.25.129.47                         107Kb   224Kb   238Kb
                                          172.25.129.109                       81.7Kb   123Kb  58.1Kb
                                          ri-jwood-d630                        39.5Kb   131Kb   108Kb
                                          172.25.129.48                           0b    100Kb  35.9Kb
                                          ri-madoop.************x.com           448Kb  89.6Kb  32.0Kb
                                          ri-zlee.************x.com            1.63Kb  84.5Kb  90.4Kb
                                          172.25.129.92                           0b   76.0Kb  75.6Kb
                                          ri-madoop.************x.com           384Kb  76.7Kb  27.4Kb
                                         
Children
No Data