The tale of a slow interne, less than ideal fibre link and not knowing where to go...

[Tony_Mc]

Morning,

 

I had a bit of a search and didn't really get anywhere on this.

 

Basically (is there such a thing when it comes to networks?), I have a school with a core Cisco phys net. gig to switch and 100meg to desktop.

 

this school has a 10meg LGFL link and is constantly using upwards of 8-9meg of that at any one time....

 

They don't have loads more machines than any other school, they don't appear to be using their MLE in a heavy way and don't use much in the way of iPlayer, youtube etc...

 

using Wireshark, should I be able to see where all this internet connectivity is going to?

 

I would love to be able to find out where this is going, there is a possibility that someone here is using torrents, though this didn't seem to come up in the wireshark report....

 

Are there any tools out there that will help me see what is going on here?

 

Thanks in advance

 

Tony

[SYNACK]

Wireshark will allow you to graph the amount of traffic to each of the destinations if I recall however this may be of limited use if all internet traffic flows through a proxy server. You should also be able to split it by tcp/ip port number so that may help show torrent use if it is not tunnled through http. Could you ask your LEA provider to generate a report of your usage data if you are behind a proxy, they may have this ability.