We need to monitor traffic in remote sites. We need to know the top user, top protocol, etc. We tried to use NetFlow, but because of tunnels VPN between remote site and the site where PRTG Network Monitor is running, the protocols is not showed. We can only see "other protocols".

Is there a way to have these informations (users, protocols, etc)? Is it possible useing sniffer, or another way?

Thanks!

Article Comments

Dear Bruno,

it might be possible using Sniffing (maybe with a PRTG Remote Probe in the remote sites), but you would have to sniff the traffic inside the VPN. Otherwise, you probably will only see the VPN traffic in total again.

Best Regards.


Mar, 2011 - Permalink

Hi,

well, we have remote probes in all remote sites. How can I sniff the traffic inside the VPN?

Thanks.


Mar, 2011 - Permalink

Well, you would have to connect the remote probe with the packet sniffer sensor to the router (if it has a monitoring port) which supplies the VPN connection to your core location. That would be the only way I see right now.


Mar, 2011 - Permalink

Hi,

we have an equipment called RV042 (Cisco). This equipment supplies VPN before link supplier.

How can we set up the sniffer sensor to manage it and get the informations we need according to our scenario?

Thanks


Mar, 2011 - Permalink

Basically you would have to place a PRTG Probe with a sniffer just before the VPN device, as a kind of "Proxy", otherwise the sniffer will again only see the VPN-Traffic (which is kind of the purpose of a VPN).


Mar, 2011 - Permalink

As of PRTG version 12, it is also possible to monitor Cisco ASA VPNs with natively available sensors:


May, 2014 - Permalink