I am using the 30 day trial of Network Monitor to test on our corporate network. I am having success with it, but I have some questions.
We are using Dell layer 3 switches (no NetFlow) so I am using SNMP to look at the ports of the switches. On most of the switches I am seeing more sensors than there are physical ports. For example, on a couple of 48 port switches I am seeing sensors for 56 connections. There are 4 fiber uplink ports that if used replace ethernet ports 45 - 48, so I can undersnatd if PRTG lists 52 ports, but 56? As a result I am unsure which sensors are monitoring the uplink ports.
Also, is there a way to see if a particular logged in user is hogging bandwidth without the availability of NetFlow or JFlow, or any other kind of "flow" protocol? I can list the top 100 and take an informed guess as to which port the traffic is moving through, but then I have to trace cables to see which patch panel number is connected to that port, then hunt down the office etc. By that time the offender might be finished with the download and can deny having done it. Will I need a different product on top of this one or is it not possible without NetFlow?
Thank you for the help. I like the product so far.