<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: Internet Bandwidth comsumed, who? in General Topics</title>
    <link>https://live.paloaltonetworks.com/t5/general-topics/internet-bandwidth-comsumed-who/m-p/598124#M118978</link>
    <description>&lt;BLOCKQUOTE&gt;&lt;HR /&gt;&lt;a href="https://live.paloaltonetworks.com/t5/user/viewprofilepage/user-id/159497"&gt;@MRamadanAHafiez&lt;/a&gt;&amp;nbsp;wrote:&lt;BR /&gt;
&lt;P&gt;Hello Team,&lt;/P&gt;
&lt;P&gt;&amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp;Firstly, thank you all for your cooperation.&lt;/P&gt;
&lt;P&gt;I have an issue that is I have my internet connection fully utilized most of the time.&lt;/P&gt;
&lt;P&gt;is there a way or work arround to find out which host IP is utilizing the bandwidth, knowing that I am not running the SD-Wan.&lt;/P&gt;
&lt;P&gt;software version 11.1.2-h3&lt;/P&gt;
&lt;P&gt;TIA,&lt;/P&gt;
&lt;HR /&gt;&lt;/BLOCKQUOTE&gt;
&lt;P&gt;The only way to see who/what is using a link's bandwidth is through netflow or looking at the actual interface.&amp;nbsp; Even looking at ACC or creating a report on top bytes sent/received does NOT necessarily give you a point in time X host consumed Y amount of bandwidth on your circuit.&amp;nbsp; The closest is to have QoS enabled on your firewall and looking at the statistics that way.&amp;nbsp; Like this:&lt;BR /&gt;&lt;BR /&gt;&lt;/P&gt;
&lt;P&gt;&lt;span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="Brandon_Wertz_0-1726669721989.png" style="width: 400px;"&gt;&lt;img src="https://live.paloaltonetworks.com/t5/image/serverpage/image-id/62300i2023F21021963FF5/image-size/medium/is-moderation-mode/true?v=v2&amp;amp;px=400" role="button" title="Brandon_Wertz_0-1726669721989.png" alt="Brandon_Wertz_0-1726669721989.png" /&gt;&lt;/span&gt;&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;From this view you can look deeper into source clients / applications being used at a given moment.&amp;nbsp;&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;The problem with looking at cumulative bytes sent/received is that it's cumulative over a defined period of time.&amp;nbsp; So if the the total bytes sent/received was 10GB the rate, or Gbps/Mbps, of that transfer will need to be a manual calculation by you.&amp;nbsp; You will need to look at the session data and will have to divide the amount of traffic by the seconds of the session then do the link speed conversion as well.&lt;BR /&gt;&lt;BR /&gt;OR you will need to have some other source monitoring and calculating what traffic was consuming a link.&lt;/P&gt;</description>
    <pubDate>Wed, 18 Sep 2024 14:35:53 GMT</pubDate>
    <dc:creator>Brandon_Wertz</dc:creator>
    <dc:date>2024-09-18T14:35:53Z</dc:date>
    <item>
      <title>Internet Bandwidth comsumed, who?</title>
      <link>https://live.paloaltonetworks.com/t5/general-topics/internet-bandwidth-comsumed-who/m-p/598090#M118971</link>
      <description>&lt;P&gt;Hello Team,&lt;/P&gt;
&lt;P&gt;&amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp;Firstly, thank you all for your cooperation.&lt;/P&gt;
&lt;P&gt;I have an issue that is I have my internet connection fully utilized most of the time.&lt;/P&gt;
&lt;P&gt;is there a way or work arround to find out which host IP is utilizing the bandwidth, knowing that I am not running the SD-Wan.&lt;/P&gt;
&lt;P&gt;software version 11.1.2-h3&lt;/P&gt;
&lt;P&gt;TIA,&lt;/P&gt;</description>
      <pubDate>Wed, 18 Sep 2024 09:39:58 GMT</pubDate>
      <guid>https://live.paloaltonetworks.com/t5/general-topics/internet-bandwidth-comsumed-who/m-p/598090#M118971</guid>
      <dc:creator>MRamadanAHafiez</dc:creator>
      <dc:date>2024-09-18T09:39:58Z</dc:date>
    </item>
    <item>
      <title>Re: Internet Bandwidth comsumed, who?</title>
      <link>https://live.paloaltonetworks.com/t5/general-topics/internet-bandwidth-comsumed-who/m-p/598095#M118973</link>
      <description>&lt;P&gt;The default view of the ACC should tell you that quite quickly&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;On the top left corner, set the desired timeframe (default is last hour), and then in the Network Activity tab (first default tab) scroll down until you see the Source IP Activity&lt;/P&gt;
&lt;P&gt;It'll show you the top 10 most active sources (and to the right, the top 10 destinations)&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;If you want more detail you can always create a custom report and sort on bytes&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;&lt;span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="reaper_0-1726653661674.png" style="width: 999px;"&gt;&lt;img src="https://live.paloaltonetworks.com/t5/image/serverpage/image-id/62296i8F42606C215F0662/image-size/large?v=v2&amp;amp;px=999" role="button" title="reaper_0-1726653661674.png" alt="reaper_0-1726653661674.png" /&gt;&lt;/span&gt;&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;</description>
      <pubDate>Wed, 18 Sep 2024 10:04:53 GMT</pubDate>
      <guid>https://live.paloaltonetworks.com/t5/general-topics/internet-bandwidth-comsumed-who/m-p/598095#M118973</guid>
      <dc:creator>reaper</dc:creator>
      <dc:date>2024-09-18T10:04:53Z</dc:date>
    </item>
    <item>
      <title>Re: Internet Bandwidth comsumed, who?</title>
      <link>https://live.paloaltonetworks.com/t5/general-topics/internet-bandwidth-comsumed-who/m-p/598124#M118978</link>
      <description>&lt;BLOCKQUOTE&gt;&lt;HR /&gt;&lt;a href="https://live.paloaltonetworks.com/t5/user/viewprofilepage/user-id/159497"&gt;@MRamadanAHafiez&lt;/a&gt;&amp;nbsp;wrote:&lt;BR /&gt;
&lt;P&gt;Hello Team,&lt;/P&gt;
&lt;P&gt;&amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp;Firstly, thank you all for your cooperation.&lt;/P&gt;
&lt;P&gt;I have an issue that is I have my internet connection fully utilized most of the time.&lt;/P&gt;
&lt;P&gt;is there a way or work arround to find out which host IP is utilizing the bandwidth, knowing that I am not running the SD-Wan.&lt;/P&gt;
&lt;P&gt;software version 11.1.2-h3&lt;/P&gt;
&lt;P&gt;TIA,&lt;/P&gt;
&lt;HR /&gt;&lt;/BLOCKQUOTE&gt;
&lt;P&gt;The only way to see who/what is using a link's bandwidth is through netflow or looking at the actual interface.&amp;nbsp; Even looking at ACC or creating a report on top bytes sent/received does NOT necessarily give you a point in time X host consumed Y amount of bandwidth on your circuit.&amp;nbsp; The closest is to have QoS enabled on your firewall and looking at the statistics that way.&amp;nbsp; Like this:&lt;BR /&gt;&lt;BR /&gt;&lt;/P&gt;
&lt;P&gt;&lt;span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="Brandon_Wertz_0-1726669721989.png" style="width: 400px;"&gt;&lt;img src="https://live.paloaltonetworks.com/t5/image/serverpage/image-id/62300i2023F21021963FF5/image-size/medium/is-moderation-mode/true?v=v2&amp;amp;px=400" role="button" title="Brandon_Wertz_0-1726669721989.png" alt="Brandon_Wertz_0-1726669721989.png" /&gt;&lt;/span&gt;&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;From this view you can look deeper into source clients / applications being used at a given moment.&amp;nbsp;&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;The problem with looking at cumulative bytes sent/received is that it's cumulative over a defined period of time.&amp;nbsp; So if the the total bytes sent/received was 10GB the rate, or Gbps/Mbps, of that transfer will need to be a manual calculation by you.&amp;nbsp; You will need to look at the session data and will have to divide the amount of traffic by the seconds of the session then do the link speed conversion as well.&lt;BR /&gt;&lt;BR /&gt;OR you will need to have some other source monitoring and calculating what traffic was consuming a link.&lt;/P&gt;</description>
      <pubDate>Wed, 18 Sep 2024 14:35:53 GMT</pubDate>
      <guid>https://live.paloaltonetworks.com/t5/general-topics/internet-bandwidth-comsumed-who/m-p/598124#M118978</guid>
      <dc:creator>Brandon_Wertz</dc:creator>
      <dc:date>2024-09-18T14:35:53Z</dc:date>
    </item>
    <item>
      <title>Re: Internet Bandwidth comsumed, who?</title>
      <link>https://live.paloaltonetworks.com/t5/general-topics/internet-bandwidth-comsumed-who/m-p/598243#M118999</link>
      <description>&lt;P&gt;Thank you so much&amp;nbsp;&lt;a href="https://live.paloaltonetworks.com/t5/user/viewprofilepage/user-id/7608"&gt;@reaper&lt;/a&gt;&amp;nbsp;and&amp;nbsp;&lt;a href="https://live.paloaltonetworks.com/t5/user/viewprofilepage/user-id/5300"&gt;@Brandon_Wertz&lt;/a&gt;&amp;nbsp;, was really helpful your resplies.&lt;/P&gt;</description>
      <pubDate>Thu, 19 Sep 2024 06:28:14 GMT</pubDate>
      <guid>https://live.paloaltonetworks.com/t5/general-topics/internet-bandwidth-comsumed-who/m-p/598243#M118999</guid>
      <dc:creator>MRamadanAHafiez</dc:creator>
      <dc:date>2024-09-19T06:28:14Z</dc:date>
    </item>
  </channel>
</rss>

