Security Basics mailing list archives

RE: Information on Bandwidth Issues


From: "Keith Bucknall" <keith.bucknall () zen co uk>
Date: Wed, 3 Nov 2004 16:36:25 -0000


Ghaith

Thanks for the information we have 4250 Superstacks with uplink and
downlink, how would I mirror these ports?

 

-----Original Message-----
From: Ghaith Nasrawi [mailto:libero () aucegypt edu] 
Sent: 03 November 2004 00:24
To: keith.bucknall () zen co uk
Cc: security-basics () securityfocus com
Subject: Re: Information on Bandwidth Issues

keith,

if by chance you're using any of the Super Stack 4400 switches, you can
setup mirror ports (i can't remember the actual naming of them, it's not
mirror) and you can only mirror one port at a time. They are very handy
to monitor traffic using a regular sniffer. maybe you'd like to mirror
your main uplink port (if you have one) and see what's going on.


On Sun, 2004-10-31 at 22:11, Keith Bucknall wrote:
Dear All,

IF possible I am looking for some advice on some problems our users, over
the last 2 weeks our network activity has increased 10 fold, most of our
applications are running very slow, from email, SQL databases and our
application in particular the ones that use Tarantella Secure Desktop a
RDP
based Terminal Services.  WE have recently moved the T/S to another
location
with a 2MB WAN link and I am really looking for some advice and types of
tools I could use to monitor the traffic from site A to B and the internal
LAN of site A and B.

We use all 3com Managed Switches and the link is provided by a managed
service, I thought about running Ethereal but understand as we uses
switches
I would have to mirror a port on each of the 5 switches, is there a tool I
could install on either site to monitor the traffic, my main concern is
either with have an increase in RDP traffic or perhaps a potential
problem.

 

Kind Regards

 

Keith Bucknall  

Attachment: smime.p7s
Description:


Current thread: