How to track down a host that is using the majority of your bandwidth

Products

• PacketShaper

Issue/Introduction

How to track down a host that is using the majority of your bandwidth.

The easiest way to track down a host that is using the majority of your bandwidth is to use the Top Talkers and Top Listeners for the class that is in question. Once you have this set up, PacketShaper will display who is using the most bandwidth by percentage. You will have the option to classify the host in the class tree, which will allow you to capture historical data. To turn on Top Talkers and Top Listeners go to the class in the manage page and select Top Talkers and /or Top Listeners on the properties section of the page.

You can also use the command line interface to see current statistics on a particular host instead of manually classifying the host in the class tree. The command will display number of connections, current, 1 minute, and peak Bps. It will also display client and server flows per minute, which could come in handy when trying to troubleshoot a host that could be issuing an attack.

Resolution

hostdb info [] [] [|all] [| []]

Here are some of the options you can use with the hostdb info command:

hostdb info (displays all host in the host database)
hostdb info –a (active host with the last 5 minutes)
hostdb info (displays information for one host)
hostdb info –sr (Sort the display by current Bps)
hostdb info –sf (Sort the display by the number of flows)