Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    How to monitor individual LAN traffic per local IP address in pfsense 2.3

    Scheduled Pinned Locked Moved Traffic Monitoring
    19 Posts 10 Posters 58.9k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • A
      anwar.s.05
      last edited by

      how to monitor individual LAN traffic per local IP address in pfsense 2.3.  Before it was possible with BandwidthD and ntop, while using 2.2.6.  But after I upgraded to 2.3, it disappeared.  please help me.

      1 Reply Last reply Reply Quote 0
      • jimpJ
        jimp Rebel Alliance Developer Netgate
        last edited by

        ntopng will be back soon, when the FreeBSD port issues are resolved, which we're keeping an eye on and helping to move along as we can.

        Keep an eye on https://www.freshports.org/net/ntopng/ – it shows "deprecated" and that the port expired. When that returns to a normal state, our package will not be far behind.

        Remember: Upvote with the 👍 button for any user/post you find to be helpful, informative, or deserving of recognition!

        Need help fast? Netgate Global Support!

        Do not Chat/PM for help!

        1 Reply Last reply Reply Quote 0
        • A
          anwar.s.05
          last edited by

          Thanks for your quick reply.  What about BandwidthD.  It was a nice tool to get summary of the usage of my home internet clients.  will it be back soon?  Is there any way to go back to 2.2.6? can you please provide me the full image file link for pfsense 2.2.6 /32 bit/x86

          1 Reply Last reply Reply Quote 0
          • dotdashD
            dotdash
            last edited by

            @anwar.s.05:

            can you please provide me the full image file link for pfsense 2.2.6 /32 bit/x86

            They are still there on the mirrors, just click on 'just show me the mirrors' and pick one.
            e.g.- https://nyifiles.pfsense.org/mirror/downloads/

            1 Reply Last reply Reply Quote 0
            • A
              anwar.s.05
              last edited by

              Thank you very much.

              1 Reply Last reply Reply Quote 0
              • MikeV7896M
                MikeV7896
                last edited by

                I believe DarkStat has an option to limit it to showing just the addresses of the LAN hosts, as opposed to both the LAN and remote hosts… but I don't believe darkstat data is persistent across reboots; I'm pretty sure it gets reset if the box gets restarted.

                The S in IOT stands for Security

                1 Reply Last reply Reply Quote 0
                • G
                  Gradius
                  last edited by

                  Will BandwidthD be back to pfSense v2.3 ?

                  Chile Movistar started to use "limited metering bandwidth" for Internet use here now, so it's crucial to have something like BandwidthD.  ???

                  RRD is way too simple under v2.3 now.  :'(

                  1 Reply Last reply Reply Quote 0
                  • jimpJ
                    jimp Rebel Alliance Developer Netgate
                    last edited by

                    @Gradius:

                    Will BandwidthD be back to pfSense v2.3 ?

                    Chile Movistar started to use "limited metering bandwidth" for Internet use here now, so it's crucial to have something like BandwidthD.  ???

                    RRD is way too simple under v2.3 now.  :'(

                    It's not clear if bandwidthd will be back. We had reports of it making some people's system unbootable, but we could never reproduce the problem.

                    Remember: Upvote with the 👍 button for any user/post you find to be helpful, informative, or deserving of recognition!

                    Need help fast? Netgate Global Support!

                    Do not Chat/PM for help!

                    1 Reply Last reply Reply Quote 0
                    • J
                      JasonJoel
                      last edited by

                      As much as I LOVE pfSense, the monitoring and reporting of traffic is really lacking overall.

                      I wish we could get something that would work and be easy to read/report on. None of the packages that were available in 2.2 were very usable (my opinion), and now there are even less in 2.3. :/

                      1 Reply Last reply Reply Quote 0
                      • jimpJ
                        jimp Rebel Alliance Developer Netgate
                        last edited by

                        Install softflowd, drop nfsen somewhere on your network, pretty good visualization. Not perfect, but usable.

                        Remember: Upvote with the 👍 button for any user/post you find to be helpful, informative, or deserving of recognition!

                        Need help fast? Netgate Global Support!

                        Do not Chat/PM for help!

                        1 Reply Last reply Reply Quote 0
                        • J
                          JasonJoel
                          last edited by

                          I'll definitely give that a shot! Looks promising.

                          1 Reply Last reply Reply Quote 0
                          • G
                            Gradius
                            last edited by

                            @jimp:

                            Install softflowd, drop nfsen somewhere on your network, pretty good visualization. Not perfect, but usable.

                            softflowd isn't a solution as it asks for a NetFlow server.

                            1 Reply Last reply Reply Quote 0
                            • J
                              JasonJoel
                              last edited by

                              I think that was his point. Use softflowd on pfsense, and also an external server running nfsen to do the analysis.

                              Not an in-box pfsense solution, but may work for me as spinning up a VM for nfsen would be easy.

                              1 Reply Last reply Reply Quote 0
                              • jimpJ
                                jimp Rebel Alliance Developer Netgate
                                last edited by

                                @JasonJoel:

                                I think that was his point. Use softflowd on pfsense, and also an external server running nfsen to do the analysis.

                                Not an in-box pfsense solution, but may work for me as spinning up a VM for nfsen would be easy.

                                Yes, exactly.

                                @jimp:

                                Install softflowd, drop nfsen somewhere on your network, pretty good visualization. Not perfect, but usable.

                                nfsen is a netflow server.

                                Remember: Upvote with the 👍 button for any user/post you find to be helpful, informative, or deserving of recognition!

                                Need help fast? Netgate Global Support!

                                Do not Chat/PM for help!

                                1 Reply Last reply Reply Quote 0
                                • G
                                  Gradius
                                  last edited by

                                  @JasonJoel:

                                  Not an in-box pfsense solution, but may work for me as spinning up a VM for nfsen would be easy.

                                  Not for me as I use a dedicated computer for pfSense (no VM at all here).  :o

                                  1 Reply Last reply Reply Quote 0
                                  • T
                                    Tjh
                                    last edited by

                                    @jimp:

                                    @JasonJoel:

                                    I think that was his point. Use softflowd on pfsense, and also an external server running nfsen to do the analysis.

                                    Not an in-box pfsense solution, but may work for me as spinning up a VM for nfsen would be easy.

                                    Yes, exactly.

                                    @jimp:

                                    Install softflowd, drop nfsen somewhere on your network, pretty good visualization. Not perfect, but usable.

                                    nfsen is a netflow server.

                                    I too was using bandwidthd, because it was the easiest to setup and use and it was the simplest (I'm not running a million dollar company here, alls i want to know is: how much GB was used this month, and who used most).

                                    I tried nfsen, was a bit more difficult to get setup, but I did it. Now i visit the nfsen 'page' on my webserver…all I get is a bunch of rrd graphs (which are already present in pfsense by default, and are a lot better tbh). And still no way of splitting by IP (forget about resolving the IP to hostname). Am I doing something wrong? A lot of things seem extremely broken in the webpage tbh, images not showing properly, styles not being applied (nothing is formatted i just see a list of links and broken images in one giant column).

                                    1 Reply Last reply Reply Quote 0
                                    • X
                                      xpaco
                                      last edited by

                                      :D try to use this: Tuning Guide for collection traffic statistics (using ipcad and lightsquid, without squid)

                                      1 Reply Last reply Reply Quote 0
                                      • B
                                        bubbawatson
                                        last edited by

                                        +1 The changes / fixes on 2.3 are very nice but desperately miss simple monitoring by IP that bandwidthD provided. Most smaller sites do not justify time spent to set up netflow or similar. Does anyone know if bandwidthD is fixable in 2.3 or is there some major technical reason it can't happen?

                                        1 Reply Last reply Reply Quote 0
                                        • johnpozJ
                                          johnpoz LAYER 8 Global Moderator
                                          last edited by

                                          @Tjh:

                                          I tried nfsen, was a bit more difficult to get setup, but I did it. Now i visit the nfsen 'page' on my webserver…all I get is a bunch of rrd graphs (which are already present in pfsense by default, and are a lot better tbh). And still no way of splitting by IP

                                          It can process your top talkers for you..

                                          Bottom of the details page..  see attached pic I just set this up last night.. Or you could add this plugin
                                          https://sourceforge.net/projects/hoststats/
                                          HostStats allows you to look on your NetFlow data from a different point of view - it calculates statistics about network traffic of each individual host (IP address) in the network.

                                          It not all that hard to setup ;) Took a couple of minutes - good instructions here https://www.youtube.com/watch?v=rge1mBvzj5E you don't have to watch the video I hate those!!  The instructions are in text in the comments.

                                          But it would be nice a simple built in way to track by IP data use..

                                          toptalkers.png
                                          toptalkers.png_thumb

                                          An intelligent man is sometimes forced to be drunk to spend time with his fools
                                          If you get confused: Listen to the Music Play
                                          Please don't Chat/PM me for help, unless mod related
                                          SG-4860 24.11 | Lab VMs 2.7.2, 24.11

                                          1 Reply Last reply Reply Quote 0
                                          • First post
                                            Last post
                                          Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.