Re: Identifying Bandwidth Hogs

2008-07-17 Thread Henning Brauer
* Diana Eichert <[EMAIL PROTECTED]> [2008-07-17 14:11]: > i have a very large nfdump running at work and after meeting the author at a conference some time ago, watching his presentation and talking to him at length, i totally recommend that. and one day I will write better netflow export for Open

Re: Identifying Bandwidth Hogs

2008-07-17 Thread Diana Eichert
On Wed, 16 Jul 2008, Sam Fourman Jr. wrote: does anyone know of a document or website that has a tourtorial on setting up a netflow sensor, collector, etc. Sam Fourman Jr. i have a very large nfdump running at work

Re: Identifying Bandwidth Hogs

2008-07-16 Thread Sean Malloy
On Wed, Jul 16, 2008 at 10:04:27PM -0500, Sam Fourman Jr. wrote: > > There's also softflowd, which can listen on an interface to pick > > up flows. Overhead is higher but it might get you something working > > until pfflowd can be mended. > > does anyone know of a document or website that has a to

Re: Identifying Bandwidth Hogs

2008-07-16 Thread Sam Fourman Jr.
> There's also softflowd, which can listen on an interface to pick > up flows. Overhead is higher but it might get you something working > until pfflowd can be mended. does anyone know of a document or website that has a tourtorial on setting up a netflow sensor, collector, etc. Sam Fourman Jr.

Re: Identifying Bandwidth Hogs

2008-07-16 Thread Stuart Henderson
On 2008-07-16, Dave Wilson <[EMAIL PROTECTED]> wrote: > Sean Malloy wrote: >> Hello, >> >> Maybe NetFlow. Checkout the pfflowd and flowd packages. > > I seem to recall it being said that the recent change if the pfsync > protocols (which pfflowd uses as its datasource) means that since 4.3 > (p

Re: Identifying Bandwidth Hogs

2008-07-16 Thread Dave Wilson
Sean Malloy wrote: Hello, Maybe NetFlow. Checkout the pfflowd and flowd packages. I seem to recall it being said that the recent change if the pfsync protocols (which pfflowd uses as its datasource) means that since 4.3 (possibly 4.2, I forget when the pfsync stuff went in) pfflowd doesn't

Re: Identifying Bandwidth Hogs

2008-07-14 Thread Zamri Besar
> On Tue, Jul 8, 2008 at 10:51 PM, David Schulz <[EMAIL PROTECTED]> wrote: >> Hello, >> >> can someone recommend me a good way to quickly determine who on the network >> is using up most the Bandwith, and preferrably, what are the using it for? >> >> I have a 4.3 Machine, which is the Firewall and

Re: Identifying Bandwidth Hogs

2008-07-14 Thread Peter N. M. Hansteen
"Joe S" <[EMAIL PROTECTED]> writes: > Check out argus (http://qosient.com/argus/). It's worth noting that there's a port of argus-3.0.0 in -current -- Peter N. M. Hansteen, member of the first RFC 1149 implementation team http://bsdly.blogspot.com/ http://www.bsdly.net/ http://www.nuug.no/ "Rem

Re: Identifying Bandwidth Hogs

2008-07-13 Thread Joe S
Check out argus (http://qosient.com/argus/). I've tried ntop, and it's unusable when the network gets busy. On Tue, Jul 8, 2008 at 10:51 PM, David Schulz <[EMAIL PROTECTED]> wrote: > Hello, > > can someone recommend me a good way to quickly determine who on the network > is using up most the Ban

Re: Identifying Bandwidth Hogs

2008-07-10 Thread Sean Malloy
Hello, Maybe NetFlow. Checkout the pfflowd and flowd packages. -- Sean Malloy www.spmalloy.com GPG KeyID: 0x13EEB747 GPG Fingerprint: D059 5076 ABB3 1E08 9965 1958 F820 CE83 13EE B747

Re: Identifying Bandwidth Hogs

2008-07-09 Thread Martin Schröder
2008/7/9 David Schulz <[EMAIL PROTECTED]>: > can someone recommend me a good way to quickly determine who on the network > is using up most the Bandwith, and preferrably, what are the using it for? ntop? Best Martin