Show bandwidth usage by protocol

[Charger14]

Hi All

I'd just like to find out, is there a way to show how much data a specific protocol used in the web filter reports? It currently just shows how many sessions each protocol had and would like to know exactly how much bandwidth each are using.

Thanks.

[dwasserman]

Web filter only see http protocol in port 80.

[dmorris]

like TCP vs UDP?
I don't think so.

If you look at the bandwidth by ports graph it will pretty much tell you the application-layer protocol.
port 25 = SMTP.
port 80 = HTTP
443 = HTTPS
110 = POP3
etc

In both cases, the Web Filter only looks at TCP HTTP on port 80, so it won't have any knowledge of anything else.

[Charger14]

No no not TCP vs UDP. I mean like port 25 (smtp) shifted 25MB (as example) and port 110 (POP3) did so many megs worth of data. The closest thing I seem to have in the reports is top ports but then all it gives me is sessions not actual data transferred.

Hmm, but either way you say web filter only looks at port 80. Is there maybe another app that can do this? I'll tell you why, we have a client on a capped ADSL line and they've been using a lot of data, the web filter logs dont add up to their usage so we want to see if there's maybe another protocol thats eating up bandwidth

[dmorris]

Its under the Bandwidth Control reports.

"Top Bandwidth Ports"

You wouldn't be the first person to discover bizzare things using tons of bandwidth.

[Charger14]

Its under the Bandwidth Control reports.

"Top Bandwidth Ports"

You wouldn't be the first person to discover bizzare things using tons of bandwidth.

Oh I see. I take it you need the Bandwidth Control addon for it? (forgive my UT noobness) although I see that it wants the AD connector, this client is still in a workgroup enviroment...

[dmorris]

If you want Top bandwidth users or to control bandwidth by users/groups you'll need directory connector (its the app that tracks users)

otherwise you don't need it.

[eliu809]

From terminal execute

#jnettop

Jnettop is a traffic visualiser, which captures traffic going through the host it is running from and displays streams sorted by bandwidth they use.

hope this help you!