I know we have similar issues, but they were long and not very helpful.
It so happened that I was offered a sysadmin, I agreed thinking"campaign will understand."
There is an office of 60 computers and 10 printers, router mikrotik 2011 after 2 switches on 48 channels. also using switches connected several wifi points.
Question: how do I know which user is loading the network ?
If the switches are sane to come to him in the face and see on what port is the highest traffic. If germanskie - only by the method of successive off ;)
You can still go on Mikrotik and see from whom comes the maximum traffic from the internal port if it is loading from the inside out. If loading the network between the internal computers, and only switch to catch.
Florence_Medhurst answered on April 4th 20 at 13:33
to zabbix(u) "put" candles SNMP
you can see the statistics (history) on ports
roel_Gerho answered on April 4th 20 at 13:35
Macie_Ra answered on April 4th 20 at 13:37
1) is It to remove the traffic dump from the point where the most traffic is aggregated, after using Wireshark to see who generates the most traffic.
2) is the Protocol snmp, to configure snmp on the switches , raise the server to accept snmp packets such as zabbix , after collecting a little bit of statistics, and see which switch port the most downloaded. then look for that user for that port.
3) a Protocol netflow configured on the router , raise the netflow collector server, and see who and what is going on.
Anais_Ratke answered on April 4th 20 at 13:39
what do you mean "load the network"???
if you are interested in who is eating more Internet traffic - see utility "torch" on Mikrotik (as I understand it the gateway)
if you need stats for any of the guards "who rocked?" proxy put. the same squid+sarg.
and if you have a problem in the network that the hosts are unavailable - to find a ring or a distressed piece of metal at random.
Reba.Connelly answered on April 4th 20 at 13:41
Look at Mikrotik utility torch. There ip address will show the client that downloads more.
Savannah answered on April 4th 20 at 13:43
Most cost-free go to the switches to see where the lights blinking non-stop. On the wire going to the celebrant to issue kicked.
Bit more complicated: to obtain and analyze SNMP on all routers/hubs/switches with.
Costly: in front of the router to put the server/gate that control all traffic to the outside/inside. In Linux like iptraf, you can watch, or even that such tools - lot...