Network monitoring tool?

[Ergot]

I need one that tells me what is connecting to where and how fast.

[Newby]

TCPView from Sysinternals can tell you what processes are connecting to what and whether they are active. I don't know how you can tell how fast they are transmitting data; a packet sniffer like Ethereal might be able to give you a general idea of how fast it's going.

[Ergot]

Yea... my dad's looking for one so he can see what is making his connection slow.

[Newby]

Yea... my dad's looking for one so he can see what is making his connection slow.

I would mix the two personally. But eh? Did he ever think it could be his ISP being a whore? That's our current problem. My dad pays for 9 mbit down and we're getting 40 kb/s tops. :/

[Sidoh]

Sniffer?

[Ergot]

Yea... my dad's looking for one so he can see what is making his connection slow.

I would mix the two personally. But eh? Did he ever think it could be his ISP being a whore? That's our current problem. My dad pays for 9 mbit down and we're getting 40 kb/s tops. :/

No... it's just him ;P Trust me.

[iago]

Ntop. 

[Ergot]

ntop for Windows is also provided as a binary application with limited capture capability. If you want to use the full version with unlimited packet capture you can either recompile by-yourself the application using the ntop source code or register your ntop for Windows copy. If you decide to register your copy, we'll send you an URL from which you can download the full version as well as a developer-friendly easy to build project for compiling ntop. As you registered your copy of ntop you are entitled to get future releases and fixes free of charge as soon as they become available.

>;( !

Let's say I identify this culprit clogging up the traffic with what it's doing... how do I go about stopping it. (Meaning, I can't stop it via task manager, or can't end it for it might cause something else not to work) How would I like block it?

[Quik]

Firewall?

[Ergot]

Firewall?

Suggestion for one?

[Quik]

Depends. What are you trying to block?

[iago]

Depends. What are you trying to block?

Exactly.  Figure out what it is. 

Is there a network?  If it's a network, it could be any computer.  I'd suggest installing ntop on a Linux box and either using the Linux as a router (temporarily, till you figure out the issue) or plugging it into the same  hub (making sure to tell ntop to use promiscuous mode). 

If it's just a single computer, figure out what's doing it.  If it's spyware, delete it.  If it's P2P, stop using it.  If it's nothing, tell your dad to stop complaining and to stop driving too, while you're at it. 

[Sidoh]

Sort of a noob question, iago, but: can you cap bandwidth for a specified IP/MAC address using something like this if it's on a network's router?

[Newby]

Sort of a noob question, iago, but: can you cap bandwidth for a specified IP/MAC address using something like this if it's on a network's router?

I know in pf on my FreeBSD router I can. On my dad's Sonicwall router he can.

It's a simple queue with a maximum bandwidth of x KB/s that I can apply to anything. And I'd just apply it to any data coming out from IP aaa.bbb.ccc.ddd.

On a side note, ntop is awesome.

[iago]

Yes, you can limit bandwidth based on anything: ip, port, protocol (layer 2, 3, 4, and 7), and any other check that iptables can do. 

Incidentally, that's called "packet shaping"

I have a script that sets it up, but I suddenly can't access the computer that it's on. I'll post it here later if I remember.