Bandwidth usage by protocol

CoXeY · 5 Dec 2006 at 12:27

Hi all,

We run a number of bandwidth monitoring tools (namely PRTG) to monitor bandwith utilization going through our switches but I need to understand the bandwidth usage by protocol for a specific server.

The server is running Windows 2003 and I cannot for the life of me get a breakdown of the server's bandwidth utilization on a protocol by protocol basis. Any ideas how i can get this info?

Thanks
Dan

bitslice · 5 Dec 2006 at 13:13

I seem to remember sniffer logs giving port info like that.

xxx kbytes smtp :25 etc.
.

Clarkey · 5 Dec 2006 at 13:28

thats good and well, but just because its running through port 25 doesn't necessarily mean its SMTP traffic.

bitslice · 5 Dec 2006 at 15:06

^^
I'd be worried if something other than SMTP, was on port 25

Sniffers like "Observer" will identify the protocols in use, or let you define new ones.
It will let you capture all the traffic to/from a particular server if you want to pick it apart.

(& ethereal)
.

CoXeY · 5 Dec 2006 at 16:25

What i'm really after is a Netflow type solution for Windows.

I've played with Ethereal and the Windows Network Monitor Service but these mearly show what packets have been transfered rather than the amount of bandwidth that has been used by each protocol.

Analysis at the port level will suffice, bitslice you mention sniffer logs could you elaborate on this a little?

Cheers
Dan.

CoXeY · 6 Dec 2006 at 14:27

I'm actually find Netlimiter is doing the trick!

It has enabled me to determine that a SQL DTS package is causing the problem and has also given me the option to throttle the bandwidth being used!

Thanks for your input though guys.

Dan.