Hot Downloads

Welcome, Guest
Username: Password: Remember me


PLZ Help Me 11 years 1 month ago #10286

  • admin
  • admin's Avatar
  • Offline
  • Administrator
  • Posts: 4
  • Karma: 0
Hello All

I am working in telecommunication company. I am facing problem in the company. Actually I have a system that shows which IP is using the bandwidth or downloading too much. we have 5 public IP's but the person who is using the DHCP , I cannot determine who is this employee, because the usage for any DHCP will be shown in the system as the usage for the switch.

Is there any software that can detrmine whcih port of the switch is downloading now (switch port number) ? because If I knew which port it is , then I will know who is this person who makes slow performence in the internet.

please I need a help to solve this problem as soon as possible.
The administrator has disabled public write access.

Re: PLZ Help Me 11 years 1 month ago #10287

  • Chris
  • Chris's Avatar
  • Offline
  • Administrator
  • Posts: 1446
  • Thank you received: 13
  • Karma: 8

The information you need to extract is easily done, I just hope your referring to a Cisco switch :) I used our Cisco Lab's 2950 Catalyst switch to perform this small presentation :wink:

Considering you've got a Cisco switch (2900 series and above) and our wanted host is '' according to your traffic analysis, you can use the following commands to obtain the information you're after:


Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to, timeout is 2 seconds:
Success rate is 100 percent (5/5), round-trip min/avg/max = 1/2/4 ms[/code:1]

This command will ensure the switch finds the device with the appropriate IP address and save it into its ram.

[code:1] ip arp
Protocol Address Age (min) Hardware Addr Type Interface
Internet 0 00c0.9fb7.72f4 ARPA Vlan1
Internet - 0008.2199.4100 ARPA Vlan1[/code:1]

This command will reveal the MAC address of the device we are looking for. In this example, IP Address is associated with MAC address 00c0.9fb7.72f4 .

Next, we need to find out which port maps to this MAC address:

[code:1] mac-address-table
Mac Address Table

Vlan Mac Address Type Ports
1 0002.b33c.3268 DYNAMIC Fa0/7
1 0090.d0eb.dfc4 DYNAMIC Fa0/7
1 00a0.c9ab.0e8f DYNAMIC Fa0/7
1 00c0.9fb7.72f4 DYNAMIC Fa0/1
Total Mac Addresses for this criterion: 4[/code:1]

As you can see, we've discovered that our wanted MAC address/Device is connected to Fast Ethernet port No.1 !

If you require further information or help, please do let us know.

Chris Partsenidis.
Founder & Editor-in-Chief
The administrator has disabled public write access.

Thanx 11 years 1 month ago #10316

  • admin
  • admin's Avatar
  • Offline
  • Administrator
  • Posts: 4
  • Karma: 0
Thank you very much, and now i will try to use it to find the the person who is making slow surfing in the interent. Then I'll complain about him to my manger :lol:
The administrator has disabled public write access.
Time to create page: 0.076 seconds


Cisco Routers

  • SSL WebVPN
  • Securing Routers
  • Policy Based Routing
  • Router on-a-Stick

VPN Security

  • Understand DMVPN
  • GRE/IPSec Configuration
  • Site-to-Site IPSec VPN
  • IPSec Modes

Cisco Help

  • VPN Client Windows 8
  • VPN Client Windows 7
  • CCP Display Problem
  • Cisco Support App.

Windows 2012

  • New Features
  • Licensing
  • Hyper-V / VDI
  • Install Hyper-V


  • File Permissions
  • Webmin
  • Groups - Users
  • Samba Setup