This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Get Traffic for Uplink Interfaces

Hi Again :)

 

we are currently looking at a new provider for providing an uplink to our company network.

To estimate the right package to choose from we need to get the current traffic per month for our uplink that we have at the moment.

We have two Interfaces that are listed as Default GW under Interfaces & Routing / Interfaces.

When I now go to Logging & Reporting -> Network Usage -> Bandwith Usage, I can choose the last month for reporting but I can´t show how much traffic was generated on an individual interface.

What´s the best way to get to that figure?

 

Thank you!



This thread was automatically locked due to age.
Parents
  • Yes you can, Julius.  Choose 'Top services by client', enter the IP of an interface, update and note the total traffic at the bottom.  Then do the same for 'Top services by server'.  Adding the 'In' numbers together and the 'Out' numbers together will give you total In/Out traffic for that IP.  Repeat for other Public IPs.  Does that work for you?

    Cheers - Bob

     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
Reply
  • Yes you can, Julius.  Choose 'Top services by client', enter the IP of an interface, update and note the total traffic at the bottom.  Then do the same for 'Top services by server'.  Adding the 'In' numbers together and the 'Out' numbers together will give you total In/Out traffic for that IP.  Repeat for other Public IPs.  Does that work for you?

    Cheers - Bob

     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
Children
  • Thank you Bob for the reply.

    I tried that out but seem to be getting a very low number.

    Which IP addresses are supposed to be used of the three that are listed on the Interface (2 after the interface name, one below after DEFAULT GW)

    Our total "Bandwith Usage" for May is showing 237.8 GB

    When I put in the three IPs for each Interface and do the two categories that you suggested I get these figures:

    - Interface 1: 7,5 GB

    - Interface 2: 22,7 GB

     

    Is everything else Internal traffic?

    Is there an easy way to differentiate between Internal and External traffic in the Network Usage Logs?

  • Not the default gateway, only the one 'IPv4 address:'.  If you have Additional Addresses defined, you will also need to do this for them.  Note that you can use the subnet assigned to you instead of the individual IPs.  The total for all of the public IPs you have is the total for External usage.

    For total Internal usage, do reports using "Internal (Network)," "DMZ (Network)," etc.

    Cheers - Bob

     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
  • Hi Bob,

     

    thank you for the further help.

     

    When I do the further numbers for the remaining interfaces it doesn´t add up to the total.

    On the five additional internal interfaces I get to about 11GB intotal.

    I guess it can never add up since the Bandwith Usage tab shows Interfaces but also Clients.

     

    So if I don´t apply any filter I get our total of 237.8 GB

    On the top of the list is our Exchange Server with 41 GB

    Then there are clients listed as NXDOMAIN as "User / Host"

     

    As mentioned above when I add up our two external interfaces I get aproximately 30GB.

     

    I don´t really know how to approach this and if I should trust the above 30GB to be the only traffic to/from External?