For quantifying traffic based on user and application, there are several tools you could use. SMNP management suites (Openview, Unicenter, etc.) would be the easiest, but that requires that you already have SNMP in place. If not, I would suggest lumping the individual user types into different VLANS, then spanning ports on the switch, and taking Sniffer and reducing the packet size to just capture the headers of each packet while increasing the buffer size to allow you to capture LOTS of packets. Then sniff the wire for a week or so. Sniffer will quantify how much of the traffic belongs to a given protocol for you, as well as which hosts are the noisiest :)
Hope this helps, Brian Hill CCNP, CCDP, MCSE 2000 (Charter Member), MCSE+I (NT4.0), MCSA (Charter Member), MCT, MCP(21), Inet+, Net+, A+ Lead Technology Architect, TechTrain Author: Cisco, The Complete Reference http://www.alfageek.com Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=43954&t=43614 -------------------------------------------------- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

