PfTop Problem
-
my pfTop output is as below
pfTop: Up State 1-65/849, View: size, Order: bytes, Cache: 10000 12:35:50 PR DIR SRC DEST PKTS BYTES STATE AGE EXP RATE PEAK AVG RULE GW tcp Out 192.168.0.1:53780 74.125.4.39:80 159017 115240K ESTABLISHED:ESTABLISHED 00:18:33 24:00:00 103555 110418 106025 38 tcp Out 192.168.0.1:53989 74.125.4.39:80 153806 111479K ESTABLISHED:ESTABLISHED 00:18:05 24:00:00 96712 113255 105212 38 tcp In 192.168.1.137:4840 127.0.0.1:80 103773 99941816 ESTABLISHED:ESTABLISHED 00:18:55 24:00:00 95853 101955 88054 0 74.125.4.39:80 tcp In 192.168.1.137:4849 127.0.0.1:80 99523 95988968 ESTABLISHED:ESTABLISHED 00:18:05 24:00:00 87173 101939 88469 0 74.125.4.39:80 tcp Out 192.168.0.1:61243 89.149.209.110:80 66697 38134238 ESTABLISHED:ESTABLISHED 03:34:52 24:00:00 3839 3839 2957 38 tcp In 192.168.1.135:2917 127.0.0.1:80 48252 35983081 ESTABLISHED:ESTABLISHED 03:34:52 24:00:00 3320 3320 2791 0 89.149.209.110:80 udp Out 127.0.0.1:47289 127.0.0.1:65353 12123 31810938 MULTIPLE:MULTIPLE 12:35:47 00:00:56 5 3240 701 14 udp In 127.0.0.1:47289 127.0.0.1:65353 12123 31810938 MULTIPLE:MULTIPLE 12:35:47 00:00:56 5 3240 701 13 tcp Out 192.168.0.1:65114 74.125.105.210:80 37625 28012725 ESTABLISHED:ESTABLISHED 00:02:36 24:00:00 189206 196656 179568 38 udp Out 127.0.0.1:61563 127.0.0.1:7426 16535 23290897 MULTIPLE:MULTIPLE 48:30:02 00:00:56 5 5 133 * udp In 127.0.0.1:61563 127.0.0.1:7426 16535 23290897 MULTIPLE:MULTIPLE 48:30:02 00:00:56 5 5 133 * udp Out 127.0.0.1:6096 127.0.0.1:2514 12577 19521477 MULTIPLE:MULTIPLE 36:35:47 00:00:56 5 5 148 14 udp In 127.0.0.1:6096 127.0.0.1:2514 12577 19521477 MULTIPLE:MULTIPLE 36:35:47 00:00:56 5 5 148 13 tcp In 192.168.1.130:2834 127.0.0.1:80 18699 18283357 ESTABLISHED:ESTABLISHED 00:02:36 24:00:00 115784 137182 117201 0 74.125.105.210:80 tcp In 192.168.1.22:1644 94.101.83.141:110 15693 11704984 ESTABLISHED:ESTABLISHED 00:01:00 24:00:00 195816 274016 195083 131 tcp Out 192.168.1.22:1644 94.101.83.141:110 15693 11704984 ESTABLISHED:ESTABLISHED 00:01:00 24:00:00 195816 274016 195083 38 192.168.0.1:61290 tcp In 192.168.1.65:1243 127.0.0.1:80 2870 2775424 TIME_WAIT:TIME_WAIT 00:01:23 00:00:19 0 0 33438 0 93.190.143.126:80 tcp In 192.168.1.76:9938 95.168.183.113:8081 2478 2115468 ESTABLISHED:ESTABLISHED 00:10:28 23:59:57 16 14672 3368 117 tcp Out 192.168.1.76:9938 95.168.183.113:8081 2478 2115468 ESTABLISHED:ESTABLISHED 00:10:28 23:59:57 16 14672 3368 38 192.168.0.1:53744 tcp In 192.168.1.34:2187 127.0.0.1:80 2303 1816436 TIME_WAIT:TIME_WAIT 00:02:06 00:00:19 0 0 14416 0 82.151.129.132:80 tcp In 192.168.1.76:10199 127.0.0.1:80 1500 1584179 TIME_WAIT:TIME_WAIT 00:02:01 00:00:37 0 0 13092 0 217.212.246.67:80 tcp In 192.168.1.34:2207 127.0.0.1:80 1865 1568156 TIME_WAIT:TIME_WAIT 00:00:57 00:00:57 0 211703 27511 0 82.151.129.132:80 tcp In 192.168.1.75:3219 127.0.0.1:80 1479 1405201 TIME_WAIT:TIME_WAIT 00:02:34 00:00:17 0 0 9124 0 195.141.38.213:80 tcp In 192.168.1.188:2605 127.0.0.1:80 1519 1376618 TIME_WAIT:TIME_WAIT 00:01:42 00:01:10 0 8 13496 0 212.175.118.98:80 tcp In 192.168.1.34:2211 127.0.0.1:80 1712 1332387 TIME_WAIT:TIME_WAIT 00:00:44 00:00:56 0 144150 30281 0 82.151.129.132:80 tcp In 192.168.1.11:1098 77.242.193.165:443 17535 1146329 ESTABLISHED:ESTABLISHED 48:13:50 23:59:49 0 38 6 117 tcp Out 192.168.1.11:1098 77.242.193.165:443 17535 1146329 ESTABLISHED:ESTABLISHED 48:13:50 23:59:49 0 38 6 38 192.168.0.1:52419 tcp In 192.168.1.78:51513 85.64.58.253:443 9045 962264 ESTABLISHED:ESTABLISHED 48:25:03 23:58:59 0 0 5 117 tcp Out 192.168.1.78:51513 85.64.58.253:443 9045 962264 ESTABLISHED:ESTABLISHED 48:25:03 23:58:59 0 0 5 38 192.168.0.1:58643 tcp Out 192.168.0.1:63159 82.151.129.132:80 1449 891770 ESTABLISHED:ESTABLISHED 00:00:08 24:00:00 121354 121354 111471 38 tcp In 192.168.1.174:2920 127.0.0.1:80 839 737652 FIN_WAIT_2:ESTABLISHED 00:11:27 00:07:54 0 0 1073 0 65.55.174.217:80 tcp In 192.168.1.151:2375 127.0.0.1:80 957 722166 ESTABLISHED:ESTABLISHED 00:09:50 23:59:33 0 5659 1224 0 194.60.206.245:80 udp Out 127.0.0.1:20978 127.0.0.1:5615 10017 698647 MULTIPLE:MULTIPLE 48:46:12 00:00:56 5 5 3 * udp In 127.0.0.1:20978 127.0.0.1:5615 10017 698647 MULTIPLE:MULTIPLE 48:46:12 00:00:56 5 5 3 * tcp In 192.168.1.34:2221 127.0.0.1:80 825 670791 ESTABLISHED:ESTABLISHED 00:00:08 24:00:00 99624 99624 83848 0 82.151.129.132:80 tcp In 192.168.1.188:2607 127.0.0.1:80 739 641012 TIME_WAIT:TIME_WAIT 00:01:42 00:01:20 0 8 6284 0 212.175.118.98:80 udp Out 127.0.0.1:24392 127.0.0.1:26531 9976 625008 MULTIPLE:MULTIPLE 48:42:38 00:00:56 5 5 3 *
my pfSense configration is
WAN* -> rl0 -> 192.168.0.1 LAN* -> re0 -> 192.168.1.1
as u see my lan network is 192.168.1.1. in the pftop result i can not see my clients ip address's. it mostly shows 127.0.0.1 (pfsense), 192.168.0.1 (pfsense's wan ip) ip addresses. is there a problem or pftop works so? i want to learn which of my clients is uses most part of my bandwidth. but pftop shows me 127.0.0.1 or 192.168.0.1