Bandwidth use details

[zoummuoz]

Hello everyone and thank you for your interest.
I have a pfSense 2.1 installed for about 200 users.

I use: routing (3 internet access), Firewall, DHCP (deny unknow client, static arp) squid3, squidGuard, pfbloker.

My question:
I can see the global use of my bandwidth.
But for example, right now, I have a user who eats while out and I can not identify them. I just see that all my output bandwidth is puff.

What I do not know where I could see the use of my bandwidth / IP?
How to limit / ip bandwidth input and output?

Thank you all for your experience returns.

[Reiner030]

Hi,

you have searched menu "Status" for possible solutions?
=> Try the 2nd last one: "Traffic Graphs" … ;)

[cooonips]

alternatively you could look at installing some of the packages such as BandwidthD or Darkstat. these can give you more detail on the type of traffic

[zoummuoz]

Thanks all for your responses.
DARKSTAT -> good, i use it now !

[johnpoz]

so your traffic is all through the proxy, squid3 that your running.  This should be able to give you top talkers.  even if you have to run the logs through a different parser.  There are loads of squid log analyzers out there that should be able to give you those kinds of details.

[KOM]

That will only give you HTTP/S stats, no?  If he's trying to catch a P2P user, Squid won't help with that.  The fact that the user 'eats while out' tells me that a P2P app is the likely culprit.

[johnpoz]

Well that is easy enough to fix - why would those ports be open, only thing outbound from a work network should be the proxy ;)