Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I am managing a network with a Linux server (CentOS 5.4) and Windows XP Clients. Recently I have become concerned about network performance and would like to begin monitoring it. Is it possible to monitor network traffic in order to find ways to optimize traffic? For example, there are some users who stream internet radio to their machines. I would like to find out if it's eating up enough bandwidth to require that they stop. Another possibility would be for me to see if performance is slowed by large file transfers between a cleint and the server. It would also be helpful to have some sort of reporting that would allow me to see peak load times in order to better schedule network maintenance tasks. Are there any utilities available that would help me accomplish this?

Thanks,

Mike

share|improve this question
    
Can you expand your question to include some details about your network equipment? i.e. do you have any managed switches? Is the CentOS server also your gateway router? If not, what are you using as your gateway router? –  gravyface Aug 24 '10 at 12:34
    
gravyface, I am not using any managed switches, and my gateway router is a Fortigate 60. Clients do not pass through the server to get to the internet. –  Mike C Aug 24 '10 at 15:46
add comment

5 Answers

up vote 1 down vote accepted

Look for iptraf and iftop, two tools that will help you a lot. You can run then in the gateway machine (if you have one) or specific hosts.

If you want to graph something you can use a SNMP tool like Cacti, Zabbix or even MRTG to have statistics of how much each host is eating from your bandwidth.

share|improve this answer
    
-1: iptraf and iotop are useful while you can afford the time to site and watch them - not for long term stats gathering. You can only use an SNMP tool if the traffic is passing through an SNMP capable router. –  symcbean Aug 24 '10 at 12:06
1  
It's iftop. And SNMP is just a matter of adding a SNMP server to the hosts, there's no need to be only "routers". Also, you can log data with iptraf and analyze it later. –  coredump Aug 24 '10 at 12:33
add comment

ntop sounds like a program for you.

share|improve this answer
add comment

you can use netstat , its very helpful command

share|improve this answer
add comment

You can use a variety of approaches. Cacti gives you an easy way of finding bandwidth used on a per-switchport basis. This translates directly into "how much traffic to/from a given workstation", but doesn't necessarily translate into "uses a lot of WAN traffic".

If you have a router that can export netflow data, you can use that to specifically tie traffic to workstations (may need to cross-correlate with DHCP logs).

share|improve this answer
add comment

Have a look at MRTG, PasTMON and Scrutinizer.

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.