I see high Upload rate and I am not sure where it comes from. How to check it?
I see 695Kbps upload while I have only 100Kbps download. There are few computers and phones connected to the router. How can I find out for sure which computer is infected or is running a torrent program if I ONLY have access to pfsense (v1.2.3)?
I see the discrepancy in Traffic Graph.
jasonlitka last edited by
The 'rate' plugin would do it for you. It augments the regular traffic graph with IP information.
Before I start installing it, is that safe and simple to run?
I can confirm it's safe and easy to install. But it only showed the WAN interface. Unfortunately, not specific IPs on LAN which is what I need. Bonus would be to show type of traffic or port as well.
tommyboy180 last edited by
Can you try to select LAN where the drop down is in my screen shot?
Gotcha! I totally missed that. Thanks.
So, it does all interfaces but not down to IP endpoint level.
cmb last edited by
Fastest way is to get a packet capture of 2000-3000 packets or so, download the pcap and use Wireshark's analysis tools.