Also if you use pfSense (which I have been using at all my client shops since 2014 … although we are not using it [right now] at the office) you can do a similar thing to what o1bigtenor is suggesting. There are a few tools out there that can help with the process but it all begins with where/what is doing the collection of data. > On Feb 10, 2020, at 7:40 AM, Andrew Lunn <andrew at lunn.ch> wrote: > > On Mon, Feb 10, 2020 at 06:48:21AM -0600, o1bigtenor wrote: >> Greetings >> >> I have started monitoring, in a gross kind of way, my internet usage >> starting by using the 24hr graph on my router software (opensource). > > OpenWRT? > > If so, just install tcpdump. You probably don't have disk space to > save an unfiltered capture file on your router, so from your Linux > desktop, use something like script(1) to log the console, ssh into the > router, and run tcpdump on the WAN port. > > You can then look at the log, and maybe narrow down the > source/destination, or protocol. Run tcpdump with a filter and capture > the frames into a pcap file. If you are worried about disk space, look > at the -c and -C options. Copy the capture off the router and use > wireshark to look at the traffic in more detail. > > Andrew > _______________________________________________ > TCLUG Mailing List - Minneapolis/St. Paul, Minnesota > tclug-list at mn-linux.org > http://mailman.mn-linux.org/mailman/listinfo/tclug-list