Captiva Portal: Looking for a drill down per user

[itchy]

Hi,

i have a pfSense running with a WAN and a wireless OPT1 interface with a captiva portal. The lan interface is currently not used.

One of my captiva portal users is generating quite a high traffic but i cannot find any possibility to identify him. Is there any possibility to get a split down per user or IP or do i need a seperate addon?

Thx and KR
Itchy

[muswellhillbilly]

The NTop or NTopNG packages can give you detailed historical traffic information, if that's what you're after. You can get the IP address and sometimes the machine name and even OS type, depending on circumstances. You could match the IP against the authentication logs to find out who your hog is.