I see high Upload rate and I am not sure where it comes from. How to check it?
-
Hi Everyone,
I see 695Kbps upload while I have only 100Kbps download. There are few computers and phones connected to the router. How can I find out for sure which computer is infected or is running a torrent program if I ONLY have access to pfsense (v1.2.3)?
I see the discrepancy in Traffic Graph.
Thanks
-
The 'rate' plugin would do it for you. It augments the regular traffic graph with IP information.
-
Before I start installing it, is that safe and simple to run?
Regards
-
I can confirm it's safe and easy to install. But it only showed the WAN interface. Unfortunately, not specific IPs on LAN which is what I need. Bonus would be to show type of traffic or port as well.
Regards,
-
Can you try to select LAN where the drop down is in my screen shot?
-
Gotcha! I totally missed that. Thanks.
So, it does all interfaces but not down to IP endpoint level.
Thanks.
-
Fastest way is to get a packet capture of 2000-3000 packets or so, download the pcap and use Wireshark's analysis tools.