PRTG monitoring - where is my traffic gone ?

Forums › LAN (ethernet/Wifi/routers/Bluetooth) › PRTG monitoring - where is my traffic gone ?

xpd

Geek @ Coastguard NZ
13765 posts

Uber Geek

Retired Mod

ID Verified

Trusted

Lifetime subscriber

#70075 18-Oct-2010 15:08

I have PRTG Traffic Grapher running on a system to help monitor bandwidth/data usage on a DSL line.

According to the ISP, 3GB of data went over that line on the weekend, and sure enough PRTG shows this on the ATM port of the router, but dosent show anything near that amount on the LAN port of the router. (monitored via SNMP)

So where has that data gone ? I thought anything being downloaded/uploaded via a workstation on the network would be recorded on the LAN port as well as the ATM but not showing anywhere. Running Webmarshal as well and thats not showing any usage but its easy to bypass really.

Gavin / xpd / FastRaccoon / Geek of Coastguard New Zealand

LinkTree

cyril7

9058 posts

Uber Geek

ID Verified

Trusted

Subscriber

#393223 18-Oct-2010 16:12

What modem

Cyril

xpd

Geek @ Coastguard NZ
13765 posts

Uber Geek

Retired Mod

ID Verified

Trusted

Lifetime subscriber

#393235 18-Oct-2010 16:32

I knew someone would ask me that and I havent got it in front of me.... (types like crazy...2mins later...)

Linksys AM300
Software Version: 1.19.04
ADSL Version: 7.2.3.0
Boot Code Version: 0.01

Gavin / xpd / FastRaccoon / Geek of Coastguard New Zealand

LinkTree

cyril7

9058 posts

Uber Geek

ID Verified

Trusted

Subscriber

#393270 18-Oct-2010 17:53

Ok, dont know of any issues there, but some older Telecom provided Dlinks used to crank through ATM traffic to nowhere that clocked up massive usage with no evidence on the LAN side, could be a similar issue, but not heard of it with the Linksys modems.

Cyril

Ragnor

8219 posts

Uber Geek

Trusted

#393414 19-Oct-2010 02:13

Were you using bit torrent, when you close utorrent peers can often keep trying to connect to your ip address for hours afterwards. Router would probably drop the traffic if you're closed utorrent and there were no outward connections.

xpd

Geek @ Coastguard NZ
13765 posts

Uber Geek

Retired Mod

ID Verified

Trusted

Lifetime subscriber

#393447 19-Oct-2010 08:17

Ragnor: Were you using bit torrent, when you close utorrent peers can often keep trying to connect to your ip address for hours afterwards. Router would probably drop the traffic if you're closed utorrent and there were no outward connections.

No torrent usage to my knowledge as the network is fairly heavily firewalled, pretty much only thing allowed through is traffic to/from the server where Webmarshal resides.

This traffic appeared over a 6 hour period.

Gavin / xpd / FastRaccoon / Geek of Coastguard New Zealand

LinkTree

webwat

2036 posts

Uber Geek

Trusted

#393908 20-Oct-2010 10:50

Well you won't see the ATM overhead on your LAN, but your router will also drop anything that can't get through its firewall/NAT. I'm guessing there was an attack on internet that was blocked by your modem or that caused your modem to only respond over the internet connection, eg as the router would respond to a ping.

Time to find a new industry!