Navigation

    Netgate Discussion Forum
    • Register
    • Login
    • Search
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search

    Pfsense uploading constantly

    General pfSense Questions
    2
    3
    1510
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • M
      moonspud last edited by

      hi guys have a weird issue with pf sense.
      first a quick run through of my setup.
      i've got an adsl service sharing the same physical network as the pf box with 2 NIC(been running without any major problems for a few months) then a couple of pcs then it goes to a wireless ap on the roof and is shot about a 1km to my current house through a switch and into a couple of pcs including the main p2p machine.

      using bandwidthd it's been showing the lan ip of the pf box uploading a lot of data. using between quarter and half my bandwidth for most of the day everyday, the pattens don't match up to the bandwidth pattens on any other devices. i've made a rule trying to block it but doesn't seem to help. promiscuous mode is unchecked. any ideas?

      below is an extract of bandwidthd
      10.1.1.246 is lan side of pfsense
      10.1.1.248 is wan side of pfsense
      Top 20 IPs by Traffic - Daily
      Ip and Name Total Total Sent Total Received FTP HTTP P2P TCP UDP ICMP
      Total 25.8G 4.8G 21.0G 51.7K 1.3G 5.6M 23.8G 1.9G 64.5M
      10.1.1.10 23.1G 2.9G 20.1G 51.7K 440.5M 4.0M 21.3G 1.7G 45.3M
      10.1.1.246 1.7G 1.6G 105.3M 0 0 1.3M 1.7G 50.9M 9.4M
      10.1.1.22 359.7M 138.6M 221.2M 0 356.6M 136.2K 356.6M 3.1M 0
      10.1.1.20 339.8M 36.6M 303.3M 0 329.4M 172.0K 338.1M 1.8M 3.6K
      10.1.1.91 224.0M 55.5M 168.4M 0 205.8M 0 214.8M 9.1M 37.2K
      10.1.1.24 89.7M 26.2M 63.5M 0 25.8M 0 26.4M 63.2M 15.9K
      10.1.1.1 14.0M 8.0M 6.0M 0 0 288 332.9K 4.0M 9.7M
      10.1.1.255 2.2M 0 2.2M 0 0 0 0 2.2M 0
      10.1.1.123 69.5K 0 69.5K 0 0 0 0 69.5K 0
      10.1.1.146 17.4K 17.4K 0 0 0 0 0 17.4K 0
      10.1.1.248 15.5K 0 15.5K 0 0 0 15.5K 0 0

      1 Reply Last reply Reply Quote 0
      • jimp
        jimp Rebel Alliance Developer Netgate last edited by

        I'm not sure if bandwidthd is monitoring that on the LAN interface or WAN interface, or some combination of both. If it's on the LAN interface, the LAN "upload" would really be traffic received from hosts on the LAN, so it would be local traffic and not necessarily going out to the Internet.

        It would likely show up this way from services you have on pfSense (like squid), but it could be a number of things.

        Traffic going out the WAN would not have a "source" of the pfSense box's LAN IP.

        1 Reply Last reply Reply Quote 0
        • M
          moonspud last edited by

          i found the problem. my browser is always open and constantly refreshing bandwidthd and imspector. the downtime were when the wireless burped and timed out the page till i manual refreshed it.

          mystery solved

          1 Reply Last reply Reply Quote 0
          • First post
            Last post

          Products

          • Platform Overview
          • TNSR
          • pfSense Plus
          • Appliances

          Services

          • Training
          • Professional Services

          Support

          • Subscription Plans
          • Contact Support
          • Product Lifecycle
          • Documentation

          News

          • Media Coverage
          • Press
          • Events

          Resources

          • Blog
          • FAQ
          • Find a Partner
          • Resource Library
          • Security Information

          Company

          • About Us
          • Careers
          • Partners
          • Contact Us
          • Legal
          Our Mission

          We provide leading-edge network security at a fair price - regardless of organizational size or network sophistication. We believe that an open-source security model offers disruptive pricing along with the agility required to quickly address emerging threats.

          Subscribe to our Newsletter

          Product information, software announcements, and special offers. See our newsletter archive to sign up for future newsletters and to read past announcements.

          © 2021 Rubicon Communications, LLC | Privacy Policy