how to figure out what node uses most of bandwidth

[epronto]

I am trying to identify what node on my network is using most of the Internet bandwidth. The network is behind PIX firewall which I monitor with Solarwinds tools. I tried Syslog but it won't let me sort it out nicely by IP or protocol.
Any tips will be much appreciated.

 

[LloydSev]

how about setting up a proxy server (such as squid). Squid does exactly what you want. (breaks it down by username)

Then to avoid users from bypassing the proxy, make sure to block all

http://www traffic

except that from the proxy (while this won't affect non-

http://www traffic

from being blocked, it will assure you that the end users have the proxy entered into their IE).

Computer/Network Technician
CCNA

 

[themut]

What you need is a protocol analyzer

 

[LloydSev]

Ethereal is a good protocol analyzer

Computer/Network Technician
CCNA