Important note about SSL VPN compatibility for 20.0 MR1 with EoL SFOS versions and UTM9 OS. Learn more in the release notes.

Sophos Firewall: Monitor bandwidth usage between IPs in realtime

Disclaimer: This information is provided as-is for the benefit of the Community. Please contact Sophos Professional Services if you require assistance with your specific environment.


Table Of Contents

Overview

This article describes the steps to monitor Sophos Firewall traffic in real-time from the command line. For example, to identify what IP is using bandwidth.

Product and Environment

Sophos Firewall

Monitoring bandwidth usage between IPs in realtime

To monitor traffic usage in real-time, do as follows:

  1. Sign in to the firewall using SSH.
  2. Access the Advanced Shell (Option 5, option 3).
  3. Enter the command:

    iftop -i IFNAME
    (
    Where IFNAME is the name of the interface, usually the LAN interface)




  4. The description for the tool output is as follows:



  5. To stop the tool, type Q to quit.
  6. To show the traffic separated by source and destination port, append -P to the above command:

    iftop -i IFNAME -P





Added TAGs
[edited by: Raphael Alganes at 5:35 AM (GMT -7) on 18 Sep 2024]