Live view which clients uses internet bandwith

[Leif]

Hello,

a customer asks if there is a possibility to see a overview of the internet uplink usage, like the one on the the security appliance status, but with an overview which clients/client causes this traffic.

Thanks for your help

Leif

[AjitKumar · Accepted solution]

Hi Leif,

I believe LIVE usage (client wise) is not possible from the Dashboard.

May be a Syslog server / API might help you to have LIVE Analytics. (Please wait for some more suggestions)

As of now the dashboard offers Analytics in the following pages

Organization / Network Wide->Summary Report
Network Wide->Traffic analytics
Network Wide->Clients

[Adam]

What works best for me is to do the following:

Go to Network Wide>Packet Capture

Select the primary uplink port on your switch to the MX or the MX WAN port and do one or more captures for the desired duration and export to wireshark pcap file.  Open the file in Wireshark and chose Statistics>Endpoints and you can sort and view for offenders.

Otherwise, as you may have observed and as @AjitKumar pointed out, the smallest window you can see is the last 2 hours which really isn't useful for your scenario.