Beyond just Router Traffic

[sll]

Hey everyone, well I am successfully collecting inbound/outbount router bandwidth usage information, I was wondering if the community might be able to point me in the right direction for ways to take it to the next level.

I've done some searches but haven't hit anything that hits the nail on the head, or that pops out to me as doing so..

Basically I would like to make a graph that breaks out the current bandwidth utilization by protocol and then be able to drill down deeper to see what client IP's are using what percentage of said protocol.

For instance, if I look at see that I currenty have 2MB in outbound traffic, I'd like to see what that 2MB is, like:

500k FTP (21)
-200k - 10.120.0.2
-100k - 10.120.0.3
-200k - 10.120.0.4

1024 K http (80)
500k file transfer (windows)

I know this probably makes no sense, essentially I want an easy way to see what client is hogging bandwidth.

[gandalf]

This may be done using cflow (there are some posts on this topic, please search). Another interesting tools would be ntop at http//www.ntop.org
Reinhard

[sll]

This may be done using cflow (there are some posts on this topic, please search). Another interesting tools would be ntop at http//www.ntop.org
Reinhard

Thanks for the info, as I mentioned I always attempt to use the search function first, there is a lot of great material here sometimes I have a hard time narrowing my results. Thank you for the tip in the right direction to look!

-Steve