N
N
Nordman992021-03-26 15:30:36
Computer networks
Nordman99, 2021-03-26 15:30:36

How to find out what downloads the most?

Hello everyone, tell me about this issue - there is a small local area, all computers are connected through one common router with a common Internet connection, there is a desire to track what software downloads the most on computers, for this you can either put some software on each computer , you can even study the logs of the Windows firewall, which is not very convenient, but I would like to do it somehow centrally, from one computer, and for this you need to either install software managed from one computer so that the reports on one computer flock, or wrap the entire traffic from all computers to one and on this computer to study traffic, using WireShark, for example, in connection with which the questions are:
1. What filter to prescribe in Wireshark in order to group packets from source to destination by number and by total volume, in descending order, i.e. so that the 1st place is source ip - dest ip where the most packets were sent
2. What other methods and software are suitable for solving this issue?

Answer the question

In order to leave comments, you need to log in

4 answer(s)
K
ky0, 2021-03-26
@ky0

It depends on what the router can do - the first thing that comes to mind is some kind of Netflow or analogues.

O
Oleg Volkov, 2021-03-26
@voleg4u

On Linux, there is an ideal utility - iptraf-ng.
If instead of a router there would be linux ....

R
Ruslan Fedoseev, 2021-03-26
@martin74ua

traffic inspector and analogues

L
LetuchiZ, 2021-03-27
@LetuchiZ

Maybe something from UTM solutions? From the free Russian ideco for a small network (up to 20 users), or sophos UTM (like up to 50).

Didn't find what you were looking for?

Ask your question

Ask a Question

731 491 924 answers to any question