Author Topic: Network monitoring tool? (Read 7175 times)

Ergot · « **on:** July 20, 2006, 05:34:33 pm »

I need one that tells me what is connecting to where and how fast.

Newby · « **Reply #1 on:** July 20, 2006, 05:37:00 pm »

TCPView from Sysinternals can tell you what processes are connecting to what and whether they are active. I don't know how you can tell how fast they are transmitting data; a packet sniffer like Ethereal might be able to give you a general idea of how fast it's going.

Ergot · « **Reply #2 on:** July 20, 2006, 05:38:47 pm »

Yea... my dad's looking for one so he can see what is making his connection slow.

Newby · « **Reply #3 on:** July 20, 2006, 05:39:48 pm »

Quote from: Ergot on July 20, 2006, 05:38:47 pm

Yea... my dad's looking for one so he can see what is making his connection slow.

I would mix the two personally. But eh? Did he ever think it could be his ISP being a whore? That's our current problem. My dad pays for 9 mbit down and we're getting 40 kb/s tops. :/

Sidoh · « **Reply #4 on:** July 20, 2006, 05:44:30 pm »

Sniffer?

Ergot · « **Reply #5 on:** July 20, 2006, 06:17:40 pm »

Quote from: Newby on July 20, 2006, 05:39:48 pm

Quote from: Ergot on July 20, 2006, 05:38:47 pm
Yea... my dad's looking for one so he can see what is making his connection slow.

I would mix the two personally. But eh? Did he ever think it could be his ISP being a whore? That's our current problem. My dad pays for 9 mbit down and we're getting 40 kb/s tops. :/

No... it's just him ;P Trust me.

iago · « **Reply #6 on:** July 20, 2006, 11:28:10 pm »

Ntop.

Ergot · « **Reply #7 on:** July 21, 2006, 01:34:38 am »

Quote

ntop for Windows is also provided as a binary application with limited capture capability. If you want to use the full version with unlimited packet capture you can either recompile by-yourself the application using the ntop source code or register your ntop for Windows copy. If you decide to register your copy, we'll send you an URL from which you can download the full version as well as a developer-friendly easy to build project for compiling ntop. As you registered your copy of ntop you are entitled to get future releases and fixes free of charge as soon as they become available.

>;( !

Let's say I identify this culprit clogging up the traffic with what it's doing... how do I go about stopping it. (Meaning, I can't stop it via task manager, or can't end it for it might cause something else not to work) How would I like block it?

Quik · « **Reply #8 on:** July 21, 2006, 01:51:12 am »

Firewall?

Ergot · « **Reply #9 on:** July 21, 2006, 02:20:31 am »

Quote from: Quik on July 21, 2006, 01:51:12 am

Firewall?

Suggestion for one?

Quik · « **Reply #10 on:** July 21, 2006, 03:26:03 am »

Depends. What are you trying to block?

iago · « **Reply #11 on:** July 21, 2006, 09:29:46 am »

Quote from: Quik on July 21, 2006, 03:26:03 am

Depends. What are you trying to block?

Exactly. Figure out what it is.

Is there a network? If it's a network, it could be any computer. I'd suggest installing ntop on a Linux box and either using the Linux as a router (temporarily, till you figure out the issue) or plugging it into the same hub (making sure to tell ntop to use promiscuous mode).

If it's just a single computer, figure out what's doing it. If it's spyware, delete it. If it's P2P, stop using it. If it's nothing, tell your dad to stop complaining and to stop driving too, while you're at it.

Sidoh · « **Reply #12 on:** July 21, 2006, 01:13:18 pm »

Sort of a noob question, iago, but: can you cap bandwidth for a specified IP/MAC address using something like this if it's on a network's router?

Newby · « **Reply #13 on:** July 21, 2006, 01:34:36 pm »

Quote from: Sidoh on July 21, 2006, 01:13:18 pm

Sort of a noob question, iago, but: can you cap bandwidth for a specified IP/MAC address using something like this if it's on a network's router?

I know in pf on my FreeBSD router I can. On my dad's Sonicwall router he can.

It's a simple queue with a maximum bandwidth of x KB/s that I can apply to anything. And I'd just apply it to any data coming out from IP aaa.bbb.ccc.ddd.

On a side note, ntop is awesome.

iago · « **Reply #14 on:** July 21, 2006, 01:55:03 pm »

Yes, you can limit bandwidth based on anything: ip, port, protocol (layer 2, 3, 4, and 7), and any other check that iptables can do.

Incidentally, that's called "packet shaping"

I have a script that sets it up, but I suddenly can't access the computer that it's on. I'll post it here later if I remember.

Sidoh · « **Reply #15 on:** July 21, 2006, 02:00:19 pm »

Woot! I might have to try to set that up

Blaze · « **Reply #16 on:** July 21, 2006, 02:01:50 pm »

My linksys router supports this!

Ergot · « **Reply #17 on:** July 21, 2006, 02:10:08 pm »

He's using the website to watch movies that uses P2P (like Bittorrent). Unfortunately, there's no option to cap the upload. I don't think my 2wire gateway/router can do that

. There's no way to do it without a router?

iago · « **Reply #18 on:** July 21, 2006, 02:20:51 pm »

Not on Windows.

And, why is he wondering what's using his bandwidth if he's using that? Duh?

Ergot · « **Reply #19 on:** July 21, 2006, 02:32:19 pm »

Quote from: iago on July 21, 2006, 02:20:51 pm

Not on Windows.

And, why is he wondering what's using his bandwidth if he's using that? Duh?

Never really read how the website was delivering his content ;\. Downloading at 30 kb/s out of 250 max is not as bad as uploading back at 20 kb/s out of 40 kb/s max. ya?

I'd like a pro-windows person on this... like myndfyre or warrior

!

And out of curiosity Linux can? How?

iago · « **Reply #20 on:** July 21, 2006, 03:33:07 pm »

Like I said, Linux has packet-shaping capabilities. I haven't got the script handy, though.

Warrior · « **Reply #21 on:** July 21, 2006, 05:43:05 pm »

Well Vista does have the network monitor, about the capping of speeds..I'm really not sure.

News:

Author Topic: Network monitoring tool? (Read 7175 times)