How can I find the bandwidth hogs?

[Ben Woods]

On 20 April 2016 at 12:21, Ronald F. Guilmette <rfg at tristatelogic.com>
wrote:
>
> Rather, I want ipfw... or some other tool... to give me, at the
> end of the test time period... a nice LIST of how many bytes came in
> from each and every separate source IP over the given time period.
> (There could be hundreds or thousands of IPs sending me packets
> with a source port of 80 or 443 over the given time period, so
> that list could end up being really long.)
>
> Can anybody give me a hint of how to do this?


Easiest solution I can think of: Use net-mgmt/darkstat.
https://unix4lyfe.org/darkstat/

Slightly more complicated solution, but with potentially more power for
filtering the data: Netflow/NfDump/NfSen
https://forums.freebsd.org/threads/49724/

Good luck!

Regards,
Ben