Soldato
- Joined
- 10 Oct 2005
- Posts
- 8,706
- Location
- Nottingham
Personally I'd run ntop under linux (the free windows version is limited on the amount it captures) and allow it to monitor the network for a while and see what it showed.
That will listen to the network and will show you which boxes are sending traffic to what internal and/or external hosts and how big this traffic is. It will also tell you what protocols are being used. This information is displayed via a nice web interface.
Of course that would mean that you need to have a linux environment running, (although a quick google seems to indicate that the SLAMPP Live CD seems to include it). I've never used this distribution (I normally have this installed a package on my SuSE server at install time) so YMMV.
More info.
This doesn't need anything installed on the other boxes.
Edit: also see here. The little bit of sleuthing he mentions would be look at the bandwidth usage by host summary table.
That will listen to the network and will show you which boxes are sending traffic to what internal and/or external hosts and how big this traffic is. It will also tell you what protocols are being used. This information is displayed via a nice web interface.
Of course that would mean that you need to have a linux environment running, (although a quick google seems to indicate that the SLAMPP Live CD seems to include it). I've never used this distribution (I normally have this installed a package on my SuSE server at install time) so YMMV.
More info.
This doesn't need anything installed on the other boxes.
Edit: also see here. The little bit of sleuthing he mentions would be look at the bandwidth usage by host summary table.
Last edited: