I have a medium sized network (700 switchports) of Cisco switches. We have a reasonable internet connection coming in. Reasonable enough that it typically sits at 20-40% utilized with no limitations in place. Occasionally it will spike to 90-100% utilization which typically means someone is using bittorrent, or a tool that uses torrents. What methods can I use to quickly diagnose these problems?
T3 -> Cisco ASA 5520 -> Cisco 4506 -> Cisco 3560 edge switches
Ideally I could have a tool that would be running; rather than having to setup a laptop on a mirrored port near the ASA. I haven't mastered Netflow; but perhaps that with a good collector is my answer?
[link] [41 comments]