Quick way to find bandwidth hogs

[JordanNolan]

Trying to find the quickest way to locate a bandwidth hog in real time going through the MX100.  Sometimes I see in Appliance Status -> Uplink I am hitting 125 MB of my 200 MB connection.  Checking the total MB for the clients for the past 2 hours is not very helpful because I am seeing file server and database traffic to an from clients over the switches as well.  

I just want to see how much is going through the MX in the last few minutes and the break down of who is doing it.  I would like to avoid having to download packet captures and counting the bytes if I can.  Something I can do right in the interface would be great.

[PhilipDAth · Accepted solution]

With only an MX there is no quicker way.

I use the packet capture approach with Wireshark.

[JordanNolan]

That stinks.  😞

[rhbirkelund]

---

@JordanNolan wrote:

Trying to find the quickest way to locate a bandwidth hog in real time going through the MX100.  Sometimes I see in Appliance Status -> Uplink I am hitting 125 MB of my 200 MB connection.  Checking the total MB for the clients for the past 2 hours is not very helpful because I am seeing file server and database traffic to an from clients over the switches as well.  

I just want to see how much is going through the MX in the last few minutes and the break down of who is doing it.  I would like to avoid having to download packet captures and counting the bytes if I can.  Something I can do right in the interface would be great.

---

If you feel like messing around with the Meraki API, you might find som inspiration here; https://github.com/meraki/automation-scripts/tree/master/topusers

[Geek123]

@rhbirkelund would it be possible to provide a guide for a newbie so he can do this? 

[Weggy]

How about using Netflow?

https://documentation.meraki.com/MX/Monitoring_and_Reporting/NetFlow_Overview

[Geek123]

Hi @Weggy ,

When it comes to Netflow I am a newbie if there is any guide that you can provide or refer me to something, please do so. It's highly appreciated.