How can I find the bandwidth hogs?

Ronald F. Guilmette rfg at tristatelogic.com
Wed Apr 20 10:28:16 UTC 2016


I don't have very much inbound bandwidth... only 6MB/sec.  I've noticed,
repeatedly, that when visiting various web sites, even if I'm not
actively doing anything on these sites, _something_ ends up gobbling
up as much as 2/3rds or more of my inbound bandwidth.  I suspect
that this may perhaps be due to some nasty bandwith hogging banner
advertisments associated with the sites I visit.  Or maybe not.
I really don't know.  But I would like to find out which IPs are
the main source of this problem so that I can just simply block
those in my IPFW rules.

So anyway, my question is a simple one:  How can I get ipwf... or
something else... to keep counts of the numbers of bytes received
from a given source port AND also from various source IPs, i.e. over
some period of time, e.g. an hour or a day?

Please understand.  I _do not_ just want ipfw to give me a TOTAL
count of all bytes received, over time, from some particular source
port (e.g. 80, 443).  I already know how to do that simple thing.
Rather, I want ipfw... or some other tool... to give me, at the
end of the test time period... a nice LIST of how many bytes came in
from each and every separate source IP over the given time period.
(There could be hundreds or thousands of IPs sending me packets
with a source port of 80 or 443 over the given time period, so
that list could end up being really long.)

Can anybody give me a hint of how to do this?


More information about the freebsd-ipfw mailing list