[b] Need urgent help with userlan traffic on switch [/b]

[loveroots]

On my network I would like to know if I have a t1 conection and the user are having slow connection to application. if I log onto the switch and do a show interface and look at the different ports input rate and output rate would this give me a good idea as to which user is utilizing more bandwidth than they need to work is this a good test. also what would be the best test I could do on my network to see what the user are doing without having to purchase some expensive software to do this. Userlan traffic is killing my network need all the help I can get.when I check the network afte hrs router input and output rate is excellent as soon as the users start to work the input and outputrate on the router is very high probally a user downloading music or video

 

[hinesjrh]

You may want to start with using Ethereal to capture and look at the packets moving on your network. Within the caputered data you can sort by source and destination addressed and then determine IP addresses that are creating more traffic than others. See

http://www.ethereal.com/

for a free download.

Another tool set is Solarwinds. I believe they offer a free 30 day trial on their website

http://www.solarwinds.net/Toolsets.htm

How many users / nodes are on your network? What kind of router do you have? Who is your ISP (they may be able to tell you what type of traffic you are pulling in on your Internet connection, and overall traffic levels)?

 

[vipergg]

You don't mention how it is setup , but if a switch is hooked to a router with a T1 connection I would start by looking at the T1 utilization when it is slow . Don't know how many users you have that are using this also . You have to remember if you have any amount of users at all and the traffic is going across that T1 , it won't ake long to fill that pipe , a T1 is slower than a lot home users cable or DSL lines . You have to remember if you have a switch or network than is running 100 meg and a lot of the traffic is hitting that 1.5 meg T1 then that is going to create a big bottleneck. Start at the router and work your way back towards the access switches. On the router interface you can turn on ip route-cache flow on the serial interface and you can kind of see who is doing the trafic by doing a " show ip cache flow" after you put the "ip route-cache flow" on the serial interface . You have to determine if it is legit traffic , if so you may need a bigger serial pipe.