How to check who is downloading the most data on the network.

Question

Hello. Please tell me how I can check who is downloading how much data in the network. I want to know if someone, for example, does not download movies all the time .. There are about 10 computers. All connected under TpLink W8910G. 4 via cable 4 wifi. Only I connect additionally via 2...

witux · Answer

You need to buy a device that supports Tomato Firmware, additionally load the bulletin board and enter the appropriate iptables rules into the Firewall script for counting Down / UP statistics for specific IPs.
This will probably be the cheapest solution.

naimadp · Answer

Thanks for the answer. And you can't check with commands somehow. Or some program. When it comes to buying equipment, it is out of the question. It's just not profitable for me. I just wanted to know if anyone is downloading too much.

And when it comes to IP data, it is out of the question. The IPs in mine turn into because they are assigned automatically. It's going to be too much trouble to get everything sorted out.

And at a given moment, it is possible to check who is downloading how much? For example, the IP address of the computer.

stylu · Answer

Don't you see active customers from this link? It should show the amount of Rx and Tx packets sent

naimadp · Answer

I have a list of clients, next to it is the MAC address, IP and from which the computer is turned on. Although the latter works differently. So I don't even know how to check how many computers are connected at the moment. As for the number of packets, I have a second tab and it writes downloaded sent there, but all together on the cable and on the wifi. It won't do me any good.

witux · Answer

So if you already have trouble with leeches, switch to a device with advanced QoS. You will assign users IP to MAC, make ARP bindings so that someone outside the DHCP scope will not use the Internet (You will limit unlisted devices). You will allocate a guaranteed and maximum transfer for everyone, leaving a little spare and no one will disturb anyone and clog the links.
And you will check transfers, e.g.

And Tp-Link will serve you as an ADSL modem.

naimadp · Answer

But I didn't say that someone was blocking this link for me. I mean the Internet well, sometimes in the evening a little worse and I wanted to know if it was the fault of the internet provider or these people. If I have to change devices, etc., I will let it go. For now it's OK.

I just thought that it could be checked in a simpler way, but if it is impossible, I close the topic and thanks.

leszekppp · Answer

I had exactly the same, even disconnecting the net, it turned out to be my speedtouch 510 fault, I replaced it and now it's good.

blues · Answer

Unfortunately, you won't learn anything in this configuration. You need to change the router to something that will be more configurable - there are many possibilities here ...

simson943 · Answer

I have the same problem Only a different device ADSL2 MODEM LINKSYS WAG120N Is it impossible to programmatically without mixing in the device?

blues · Answer

If you do not have such an option in the standard software, all you have to do is look for an alternative (tomato, openwrt). But it seems to me that there is no such possibility on DSL models (it needs to be checked). Of course, it is always possible to disconnect the connected clients one by one and thus find out who is causing the problems. In the case of wired - a very simple matter (cable by cable). For wireless, you filter MAC addresses one by one. But it's an invasive method. How can you change the soft, do it. You will gain a lot more very useful stuff - you might be interested, for example, shapping per-user :) But it all takes care of programmatically

simson943 · Answer

Please brighter, I know computers a bit, but GEEK is not me. What to check? How to set? 100% of someone connected to the WIFI sucks.

blues · Answer

Is it so hard to type in google, for example openwrt? The first link is the home page. As much as 2 clicks further there is a list of supported hardware: Link . There is also tomato, dd-wrt, and a few other alternative router firmware. Forgive me, but I don't want to browse through the lists to see if your specific router is supported. An exchange would definitely solve your problems. I described what can be done on foot to remedy the situation. But this is only a half-measure and you will have to do all the work again next time. Replacing the firmware with one with shapping, statistics and queuing solves the problems once and for all.

simson943 · Answer

No, it's not that hard to check and of course I did.
However, both programs interfere with the modem, ie its software.
I mean a sniffer, something like CommView, but not that exact, why should I know where what packet is going. It's all about simple statistics, which IP or which computer (by name) gets the most and that's it.

blues · Answer

Of course they interfere, otherwise you can't put anything on the router. Well, there's nothing like writing what's going on Wireshark is available for free.

piterus99 · Answer

With Wireshark or Commview you will not see what exactly is going to it, the specificity of switches and network cards will not allow it.

blues · Answer

I wanted to write it too, but here it is about wifi, so it can work (depending on the network card).

simson943 · Answer

Wireshark is the same as CommView Do you know how to set it to show network statistics? The WIFI card is built into Dell laptop

blues · Answer

Rather the other way around But this is a sniffer, not a statistics program. You have to be able to use it and understand a little what you see, otherwise I don't bode well for you. You will get the statistics as I wrote at the beginning - the appropriate firmware for the router. So we go back to the beginning. PS: moooo, maybe even etherape would work.

rogerowaty · Answer

... join the topic because I also have a problem with "leeches"
By the way, maybe some of you know how to see what is currently being sucked in, using dd-wrt or wireshark.

It seems to me that the "drunks" somehow outsmart the QoS mechanisms, and I often see that the hosts connected to the lan refer to port 80 of the external addresses.
p2p probably doesn't work on it or I'm out of date: /

Do you have any idea how to spot the drunks?

How to check who is downloading the most data on the network.

Post #1

Post #2

Post #3

Post #4

Post #5

Post #6

Post #7

Post #8

Post #9

Post #10

Post #11

Post #12

Post #13

Post #14

Post #15

Post #16

Post #17

Post #18

Post #19

Post #20

Topic summary