Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    WAN interface maxed every morning at the same time?

    Scheduled Pinned Locked Moved General pfSense Questions
    5 Posts 4 Posters 2.2k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • E
      ealvar
      last edited by

      I've been noticing in my RRD logs that between 5:30am and 7:30am my WAN-In traffic is through the roof and is effectively maxed out during this window (avg 2.94Mb/s).  This is a 3mb down / 1mb up connection and is hitting about 4gb of WAN-In data during this timeframe.

      There is little to no corresponding traffic on the LAN side.

      90% of my WAN-In traffic during a 24 hour window is during this time.

      The last two mornings I've disconnected the LAN completely so there is nothing on my internal network that could be causing this inbound traffic.  Still seeing the massive spike.

      The Firewall system logs aren't terribly useful because with all the logging I can't go back far enough to get an idea of what's going on.

      Any suggestions?

      Seems strange that all this WAN traffic is coming in but apparently not going anywhere.  Could this be some type of DDOS or something?

      Baffled…

      Thanks,

      E

      1 Reply Last reply Reply Quote 0
      • ?
        Guest
        last edited by

        install and start ntop , should tell you what´s hogging the line

        /F

        1 Reply Last reply Reply Quote 0
        • C
          cmb
          last edited by

          anything in your firewall logs at that time?

          1 Reply Last reply Reply Quote 0
          • F
            familyguy
            last edited by

            @fredde:

            install and start ntop , should tell you what´s hogging the line

            /F

            Do you mean installing ntop on the pfsense box?

            1 Reply Last reply Reply Quote 0
            • ?
              Guest
              last edited by

              @familyguy:

              @fredde:

              install and start ntop , should tell you what´s hogging the line

              /F

              Do you mean installing ntop on the pfsense box?

              Yes, system -> packages -> ntop
              that´s asumed you dont run embedded version

              /f

              1 Reply Last reply Reply Quote 0
              • First post
                Last post
              Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.