[129822] in North American Network Operators' Group
Re: Juniper SSG-140, Monitoring and control the usage of the Internet
daemon@ATHENA.MIT.EDU (Marek Lukaszuk)
Tue Sep 21 05:02:19 2010
In-Reply-To: <261E17F810EEC548ACD322ED2E847CE30B9B28@exten02.kyiv.ciklum.net>
Date: Tue, 21 Sep 2010 11:02:10 +0200
From: Marek Lukaszuk <m.lukaszuk@gmail.com>
To: Yasir Munir Abbasi <yamu@ciklum.net>
Cc: "nanog@nanog.org" <nanog@nanog.org>
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org
On Tue, Sep 21, 2010 at 07:49, Yasir Munir Abbasi <yamu@ciklum.net> wrote:
> Hi,
Hi,
> I have a SSG-140 Juniper Firewall. I need to ask, how can I Monitor the individual IP traffic? I mean I want to see who is taking more bandwidth.
>
> Please help me out. Thanks
As far as I know, you will not be able to get any bandwidth usage per
host from the ScreenOS.
You can still get a pretty good idea who is hammering your network
either by enabling logging on the policies or by analyzing the session
table. In both cases you you will probably need to analyze the data on
some remote host (traffic/policy logs can be send by syslog, get
session output can be copy over tftp) and not on the device itself.
There is no support for anything like JFlow or NetFlow on ScreenOS.
> Yasir Munir Abbasi
Thanks,
Marek