1

It doesn't matter if utility is for Ubuntu or for Windows XP/7, just need to see what pc is using the most traffic in local network.

Probably some spammer etc on that pc.

Need to get rid of that, before calling to my ISP.

Thanks ;)

Somebody
  • 123
  • 10

2 Answers2

1

With a managed switch you can set a port to monitor traffic through the switch. Connect a PC to that port and run something like ntop or etherape on that PC

See How can I monitor internet usage in my network?

Community
  • 1
RedGrittyBrick
  • 81,981
  • 20
  • 135
  • 205
0

Try these first:

  • Do you have access to the switch? Just have a look on the switch panel.
  • Do you have access to the router? Take a look at the log/adjust loglevels

Mind you packet sniffing can be risky business, and it may or may not be legal for your situation. It is fairly unlikely you would be detected but you need careful firewlling.

To start with I guess you can start from Wireshark http://sourceforge.net/projects/wireshark/files/

bubu
  • 9,863
  • 2
  • 29
  • 44
  • It's my business network mate :D . Ofc i have an access to router and etc. But i'm not in the office right now, so i'll have to do it via teamviewer etc remotely. Logs is good tip, but should i parse them? It's a bit hard work to do. – Somebody Dec 23 '10 at 09:42
  • Umm, I guess we can start with wireshark first.. Back then when I was still doing network admin as a side job of my high school days we really just look at the switch and see who's blinking too much =)... – bubu Dec 23 '10 at 09:48
  • Yea that's nice way to track the issue :D – Somebody Dec 23 '10 at 09:50
  • Btw does Wireshark have graphs or something like that? Or overall packets sent/received by specific ip? – Somebody Dec 23 '10 at 09:52
  • Ethereal was renamed Wireshark some years ago. Excellent tool. – RedGrittyBrick Dec 23 '10 at 09:53
  • Wireshark can easily generate these variable. Just set a filter. e.g. ip.src == 10.2.3.4, etc. – bubu Dec 23 '10 at 09:57
  • @RedGrittyBrick - I was recommending ethereal but soon after I write it I found out that it was renamed. showing my age =P – bubu Dec 23 '10 at 09:58