What is this?

This knowledgebase contains questions and answers about PRTG Network Monitor and network monitoring in general.

Learn more

PRTG Network Monitor

Intuitive to Use. Easy to manage.
More than 500,000 users rely on Paessler PRTG every day. Find out how you can reduce cost, increase QoS and ease planning, as well.

Free Download

Top Tags


View all Tags

Monitoring details in PRTG

Votes:

0

I would like to know the following: 1) Bandwidth usage of our WAN at a certain period, certain point. 2) If the bandwidth usage is high, we want to know which IP, user, application, software used up the bandwidth at that certain period, certain point.

We use the PRTG to monitor the firewall SNMP and we can see the point 1 result. How can we get Point 2 result?

Is that Netflow can help us in this issue? If so, besides connect PRTG to the firewall for Netflow data, is there any other sensor we need build up to get the Point 2 data? We need estimate the cost required.

Thx alot. Ivan

monitoring netflow prtg

Created on Oct 23, 2013 2:52:13 AM



7 Replies

Votes:

0

Hi Ivan,

the bandwidth of the WAN interface can be measured with a simple SNMP traffic counter. In the historical data function it is possible to define any time period for analysis.

The IP and Port which consumes the bandwidth will be visible in a Netflow Sensor in the connection top list.

To use netflow you need to enable the netflow export on the firewall/router or switch. It is also possible to get this information from a mirroring port with a Packet Sniffer Sensor

Created on Oct 23, 2013 11:03:23 AM by Michael Schmidt [Paessler Support] (150) ●1 ●1



Votes:

0

So, for example, if I found the period 9:00-10:00 had abnormal high usage in through the SNMP traffic counter, can I drill down in the same page to see which computer is using up the bandwidth?

Can I get which user is using that problem computer?

Created on Oct 24, 2013 1:21:34 AM



Votes:

0

If you have a flow or packet sniffing sensor for your Internet connection you could track down

the TopTalkers, TopProtocols and TopConnections for that hour.

please see

https://www.paessler.com/knowledgebase/en/topic/2923-how-do-i-discern-excessive-bandwidth-usage-with-prtg

Created on Oct 24, 2013 7:09:32 AM by Aurelio Lombardi [Paessler Support]

Last change on Dec 2, 2021 8:32:51 AM by Maike Guba [Paessler Support] (2,404) ●2 ●1



Votes:

0

Thx!

In PRTG, if we use flows or packet sniffing, is that support drill down function to see what is using up the bandwidth?

Is there any demo site which I can see the result of using flows or packet sniffing?

Ivan

Created on Oct 25, 2013 1:40:28 AM

Last change on Dec 2, 2021 8:33:12 AM by Maike Guba [Paessler Support] (2,404) ●2 ●1



Votes:

0

the PRTG trial that you can download for testing supports all features that PRTG has to offer.

Flows and packet sniffing, too.

https://www.paessler.com/prtg/download

Created on Oct 25, 2013 11:18:26 AM by Aurelio Lombardi [Paessler Support]

Last change on Dec 2, 2021 8:33:28 AM by Maike Guba [Paessler Support] (2,404) ●2 ●1



Votes:

0

Dear Aurelio,

Is there any screen shot or demo site which we can access?

We have no time to trial each software to see whether it suit our requirement or not.

Created on Oct 26, 2013 4:44:27 AM



Votes:

0

Ivan,

Generally you are able to do this with our Netflow Sensors but the caveat here is that you need to define which types of traffic you want to see when creating the sensor. When PRTG processes the data from Netflow, once it's done it does not retain the data for later analysis.

You can see the standard channels in the screenshots that are below. You can also define your own channels based on the information in this article.

Netflow

Larger Size

Created on Oct 28, 2013 2:24:53 PM by Greg Campion [Paessler Support]




Disclaimer: The information in the Paessler Knowledge Base comes without warranty of any kind. Use at your own risk. Before applying any instructions please exercise proper system administrator housekeeping. You must make sure that a proper backup of all your data is available.