Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    WAN and LAN Traffic Graph at Idle

    Scheduled Pinned Locked Moved General pfSense Questions
    4 Posts 2 Posters 687 Views 2 Watching
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • P Offline
      packetpirate
      last edited by

      Just having a look at my WAN traffic with nothing attached to the router, I am seeing the following on WAN and LAN, is this normal? Some kind of background noise?

      wan.png

      johnpozJ 1 Reply Last reply Reply Quote 0
      • johnpozJ Online
        johnpoz LAYER 8 Global Moderator @packetpirate
        last edited by

        @packetpirate I assume if you move your mouse on over that its bits/s not Bytes..

        Yeah there is always going to be noise.. Wan if no inbound to your wan IP, you prob going to see arps from others on the same network from your isp..

        Same could go for your lan side, are you saying nothing on there at all no other clients - there is your box for sure I take it? Or you connecting in via something other lan lan. But even if you were not loading the page, there is going to be arp and broadcast and multicast, even your switch if sending stp etc..

        If your curious I would sniff on the interfaces via the diagnostic menu, packet capture and see what kind of traffic your seeing.

        An intelligent man is sometimes forced to be drunk to spend time with his fools
        If you get confused: Listen to the Music Play
        Please don't Chat/PM me for help, unless mod related
        SG-4860 24.11 | Lab VMs 2.8, 24.11

        P 1 Reply Last reply Reply Quote 0
        • P Offline
          packetpirate @johnpoz
          last edited by packetpirate

          @johnpoz
          They are actually Bytes, so ~6 kB/s, which is why the values seemed "higher" than I would have expected.

          I did a packet capture on the WAN side and it seems to be mostly ARP requests from IPs owned by my ISP: "ARP, Request who-has ... tell ..." Looks like about 10 requests of length 46 per second, seems like a lot, what do you think?

          On the LAN side it looks like some "loop prevention" packets being sent from my switch.

          So, all seems to be accounted for, I just expected the values to be lower. Thanks for the tip to capture the packets!

          johnpozJ 1 Reply Last reply Reply Quote 0
          • johnpozJ Online
            johnpoz LAYER 8 Global Moderator @packetpirate
            last edited by johnpoz

            @packetpirate said in WAN and LAN Traffic Graph at Idle:

            Looks like about 10 requests of length 46 per second

            I get more than that ;) heheh

            Just checked and about 32 a second worth of arp.. Its horrible the isp should really limit that, its not hard to do.. I hit my 100 packet limit of my capture in like 3 seconds.

            An intelligent man is sometimes forced to be drunk to spend time with his fools
            If you get confused: Listen to the Music Play
            Please don't Chat/PM me for help, unless mod related
            SG-4860 24.11 | Lab VMs 2.8, 24.11

            1 Reply Last reply Reply Quote 0
            • First post
              Last post
            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.