So who ships the network?

I know we have similar issues, but they were long and not very helpful.
It so happened that I was offered a sysadmin, I agreed thinking"campaign will understand."
There is an office of 60 computers and 10 printers, router mikrotik 2011 after 2 switches on 48 channels. also using switches connected several wifi points.
Question: how do I know which user is loading the network ?
April 4th 20 at 13:29
7 answers
April 4th 20 at 13:31
If the switches are sane to come to him in the face and see on what port is the highest traffic. If germanskie - only by the method of successive off ;)
You can still go on Mikrotik and see from whom comes the maximum traffic from the internal port if it is loading from the inside out. If loading the network between the internal computers, and only switch to catch.
April 4th 20 at 13:33
to zabbix(u) "put" candles SNMP
you can see the statistics (history) on ports
to zabbix(u) "put" candles SNMP

why not led lights? - Jefferey86 commented on April 4th 20 at 13:36
April 4th 20 at 13:35
Wireshark
How will it help? All modern switches able to send only traffic between those ports, on which hang the MAC of the sender and receiver zerkala traffic to all ports. To separate car traffic will not be seen. - Augusta.VonRueden15 commented on April 4th 20 at 13:38
@Earnest_Cremin80, modern switches can port-mirror - Jefferey86 commented on April 4th 20 at 13:41
@rosalyn_Mohr, when they are manageable and traffic is not very much. - Augusta.VonRueden15 commented on April 4th 20 at 13:44
April 4th 20 at 13:37
several ways.
1) is It to remove the traffic dump from the point where the most traffic is aggregated, after using Wireshark to see who generates the most traffic.
Labor-intensive
2) is the Protocol snmp, to configure snmp on the switches , raise the server to accept snmp packets such as zabbix , after collecting a little bit of statistics, and see which switch port the most downloaded. then look for that user for that port.
3) a Protocol netflow configured on the router , raise the netflow collector server, and see who and what is going on.
April 4th 20 at 13:39
what do you mean "load the network"???
if you are interested in who is eating more Internet traffic - see utility "torch" on Mikrotik (as I understand it the gateway)
if you need stats for any of the guards "who rocked?" proxy put. the same squid+sarg.
and if you have a problem in the network that the hosts are unavailable - to find a ring or a distressed piece of metal at random.
April 4th 20 at 13:41
Look at Mikrotik utility torch. There ip address will show the client that downloads more.
April 4th 20 at 13:43
Most cost-free go to the switches to see where the lights blinking non-stop. On the wire going to the celebrant to issue kicked.

Bit more complicated: to obtain and analyze SNMP on all routers/hubs/switches with.

Costly: in front of the router to put the server/gate that control all traffic to the outside/inside. In Linux like iptraf, you can watch, or even that such tools - lot...

Find more questions by tags MonitoringNetwork administration