Does the switch do NetFlow? That's what you want to do the protocol/app level inspection. I'm guessing no give it's a cheapo Dell switch.
Your next option is mirroring the ports all to one (assuming the switch lets you do that and you don't overrun the buffer on the target machine) and running some sort of traffic analysis/netflow type app on a machine. I don't know of one offhand but this is typically done at the router level but doesn't look like you have the equipment to do that I'd guess. Thanks, Brian Desmond br...@briandesmond.com c - 312.731.3132 From: Andy Shook [mailto:andy.sh...@peak10.com] Sent: Wednesday, June 02, 2010 12:11 PM To: NT System Admin Issues Subject: fav network bandwidth monitoring tool Got a small multi-tenant environment (Dell PC 6224 and Fortigate 80C) where each tenant has their own access port on the switch with their own VLAN and IP space and I'd like recommendations on a free tool that could give me a break down on who's doing what and what apps\protocols are hogging the bandwidth. I am in the middle of deploying MRTG bundle but it's just showing me bandwidth per port on the switch at this time, just to let you know. Thanks for the recommendations... Shook ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~