So who loads the network?

Question

Monitoring

I know that there were similar questions, but they were for a long time and did not really help.
It so happened that I was offered to become a system administrator, I agreed, scrolling in my head "I'll sort it out."
There is an office for 60 computers and 10 printers, a mikrotik 2011 router after 2 switches for 48 channels. also several more Wi-Fi points are connected through switches.
Question: how to find out which user loads the network?

Answer 1

If the switches are sane, go to their face and see which port is the most traffic. If Dishmanskie - only by sequential shutdown;)
You can also go to Mikrotik and see from whom the maximum traffic comes from the internal port - this is if the download is from inside to outside. If the network is loaded between internal computers - only catch on switches.

Answer 2

to zabbix (y) "screw" candles via SNMP
you will see statistics (history) on ports

Answer 3

Wireshark

Answer 4

several ways.
1) This is to dump the traffic from the point where traffic is most aggregated, then use Wireshark to see who generates the most traffic.
Labor- intensive
2) there is an snmp protocol, configure snmp on switches, raise a server that will receive snmp packets for example zabbix , then collect a little bit of statistics, and see which switch port is most loaded. then see what kind of user is behind this port.
3) There is a netflow protocol, configure it on the router, raise the netflow collector on the server, and see who and what indulges.

Answer 5

what means "loads a network"???
if you are interested in who eats more Internet traffic - see the "torch" utility on Mikrotik (as I understand it is a gateway)
if you need statistics for some guards "who downloaded how much?" - set proxy. the same squid+sarg.
and if you have problems in the network, that the hosts become unavailable - look for a ring or a problem piece of iron by typing.

Answer 6

Look at Mikrotik with the torch utility. There, by ip address, it will show the client who downloads the most.

Answer 7

The most cost-free: go to the switches, see where the lights blink non-stop. Go along the wires to the hero of the occasion for the issuance of lyuli.
A little more complicated: receive and analyze SNMP from all routers/hubs/switches.
Expensive: put a server / gate in front of the router, which controls all traffic out / in. In Linux-like, you can watch iptraf, or something else, such utilities - dofiga ...