Bandwidth Monitor Guide: How to Track Network Usage, Set Alerts and Pick the Right Tool
Advertisement
Most bandwidth problems are not mysterious. One backup job, a software update push or a video call surge fills a link, and everything else slows down. A bandwidth monitor makes that visible within minutes instead of days.
Two data sources do the work. SNMP interface counters give total bytes in and out per port, while flow protocols such as IPFIX (RFC 7011) and NetFlow v9 (RFC 3954) reveal which hosts, applications and conversations consumed the bandwidth.
| Approach | Data source | Answers | Best for |
|---|---|---|---|
| SNMP counter polling | Interface byte counters | How full is this link? | Quick utilization graphs and alerts |
| Flow analysis | NetFlow, IPFIX, sFlow | Who and what is using the link? | Top talkers and application breakdown |
| Packet capture | Mirrored traffic | What exactly is in the traffic? | Deep troubleshooting on a single link |
How a bandwidth monitor works
A bandwidth monitor samples counters or receives flow records at fixed intervals, converts the deltas into rates, stores them in a time-series database and compares them with thresholds. Graphs and alerts are built from that stored history.
Utilization formula
The standard calculation turns two counter readings into a percentage of link capacity.
ΔOctets is the change in the interface byte counter between two polls, ΔSeconds is the time between them, and link speed is the interface capacity. For a full-duplex link, calculate inbound and outbound separately. A 1 Gbps port that moves 3,750,000,000 bytes in 60 seconds is running at 500 Mbps, or 50 percent.
Why polling interval matters
Five-minute averages hide short bursts. If users complain about slowness yet graphs look calm, shorten the interval to one minute or use flow data, which keeps conversation-level detail.
How to set up bandwidth monitoring step by step
Set up bandwidth monitoring by choosing the links to watch, enabling SNMP or flow export on the devices, adding them to your monitor, setting thresholds and testing alerts. Start with internet uplinks and core switch trunks.
- List critical links: WAN circuits, data center uplinks, and interfaces to cloud on-ramps.
- Enable data export: turn on SNMPv3 for counters and configure NetFlow, IPFIX or sFlow to send records to your collector.
- Add devices to the monitor: use discovery, then confirm interface names and speeds are correct.
- Baseline for two weeks: record normal peaks by hour and weekday before choosing thresholds.
- Set alerts: warn at 70 to 80 percent sustained utilization, and alert on sudden changes against baseline.
- Review top talkers weekly: look for backups, updates and cloud sync jobs that need scheduling.
Bandwidth monitor tools from the SaaSPodium directory
SaaSPodium lists dedicated bandwidth and flow tools as well as general network monitors that include bandwidth sensors. The right choice depends on whether you need quick utilization graphs or conversation-level flow analytics.
Ratings are not yet published for these listings, so we describe them by positioning, platform and pricing model.
Kentik
Kentik calls itself the network observability company. It is listed as a paid cloud and on-premises product aimed at enterprise teams that need to understand traffic across large, distributed networks.
- Directory listing: Kentik.
- Strength: flow-based traffic analytics at large scale across data centers, cloud and internet edges.
- Data sources: flow protocols and cloud flow logs, which suit hybrid networks.
- Check in trial: data retention, ingestion limits and API access.
ntopng
ntopng offers high-speed web-based traffic analysis and flow collection. It is listed as freemium for small and medium teams and runs on Linux, Mac and Windows, so it fits budgets that cannot absorb enterprise licensing.
- Directory listing: ntopng.
- Strength: real-time traffic views with host and application breakdowns.
- Deployment: self-hosted, which keeps data inside your network.
- Check in trial: which features sit in paid editions and how much traffic your hardware can handle.
NetCrunch
NetCrunch describes smart and agentless network monitoring. It is listed as a paid, on-premises Windows tool for small and medium teams that want bandwidth data inside a broader monitoring product.
- Directory listing: NetCrunch.
- Strength: bandwidth monitoring combined with general device, server and service monitoring.
- Data sources: SNMP and flow data, depending on configuration.
- Check in trial: node counts and flow collector sizing.
Datadog
Datadog presents modern monitoring and security. It is a paid SaaS platform for medium and enterprise teams that want network metrics alongside infrastructure and application data.
- Directory listing: Datadog.
- Strength: correlates bandwidth changes with deploys, hosts and services.
- Related product: the dedicated network listing is Datadog Network Monitoring.
- Check in trial: per-host and per-device pricing, and retention.
Paessler PRTG Network Monitor
PRTG offers a freemium, sensor-based way to monitor everything on your network. Interface and flow sensors make it a common first bandwidth monitor for small IT teams.
- Directory listing: Paessler PRTG Network Monitor.
- Strength: quick setup with prebuilt bandwidth sensors and dashboards.
- Check in trial: how many sensors each interface consumes.
- Fit: small to mid-size networks that want one tool for availability and bandwidth.
Other platforms with bandwidth monitoring
Several general network monitors also track interface utilization, so you may not need a separate bandwidth monitor. Compare them against your device count and alerting needs.
- ManageEngine OpManager: unified network and server monitoring, listed as freemium.
- Progress WhatsUp Gold: maps and alerts for mid-size teams, listed as freemium.
- Auvik: cloud-managed network management, listed as paid.
- Zabbix: free open-source monitoring with interface templates.
For a wider view, read our bandwidth monitoring software guide, the Kentik vs ntopng vs NetCrunch vs Datadog comparison and the Bandwidth Monitoring Software category.
Choosing the right bandwidth monitor
Pick the lightest tool that answers your question. If you only need link utilization graphs, SNMP polling is enough. If you need to know who is consuming bandwidth, you need flow data, and that favors tools such as Kentik.
- Single office: a sensor-based or free open-source monitor with SNMP polling.
- Multi-site business: flow collection at each edge, with central dashboards.
- Cloud-heavy teams: check support for cloud flow logs, not only device exports.
- Regulated teams: confirm data retention and access controls against your security policy, using guidance such as NIST SP 800-137.
Frequently Asked Questions
What is the best free bandwidth monitor?
Free options include open-source tools such as ntopng and Zabbix, plus free tiers of commercial products. The right pick depends on whether you need SNMP graphs or flow-level detail, and on how much setup time you can spend.
How much bandwidth monitoring data should I keep?
Keep high-resolution data for several weeks to troubleshoot incidents and rolled-up averages for a year or more for capacity planning. Check retention limits and storage costs in each product before buying.
Do I need flow data or is SNMP enough?
SNMP is enough to see how full a link is. You need NetFlow, IPFIX or sFlow when you must identify which hosts, applications or users caused the traffic.
Advertisement