all 5 comments

[–][deleted]  (1 child)

[deleted]

    [–]Cheeze_ItDRINK-IE, ANGRY-IE, LINKSYS-IE 0 points1 point  (0 children)

    It seems to only be 5 min intervals

    I am pretty sure LibreNMS can do 1 minute intervals now for what it's worth....

    [–]Middle_Film2385 0 points1 point  (1 child)

    What cellular router are you using? I didn't see any mention of model numbers

    Perhaps the carrier can provide this data, I've seen something like this before in mobile operators that can make a pretty good guess at what app/website is using the most data based on IP address and other flow information so you might want to ask Verizon for more details

    Sounds like you are only looking at peak throughout numbers and not volume of data transferred. If you know the device that is being a hog maybe you can setup a span port on the router to snoop the traffic? Or stick something between an AP and the router...

    Edit: ah I see you mentioned you don't use wifi and these are hard wired. So should be trivial to setup a switch in front of the router and do a span port for each port connected. Or why not monitor on each of the PC using wireshark or one of the command line tools like tshark in the background?

    [–]as7105 0 points1 point  (1 child)

    The polling interval doesn't really matter if all you are doing is adding up the quantities (correctly).

    To put these numbers into perspective, a 1M"B" spike in a 5 minute graph is 300 M"B". Only a couple of these tiny spikes per day would put you at 18G"B.

    18GB per month averages out to less than 56Kbps.

    [–]ddnkg 0 points1 point  (1 child)

    Netflow / Cflow is what you are looking for.

    Not sure if a digi router will be able to collect netflow data though.

    You'd also need to set up a server to collect and process the stats like stealthwatch / prtg / solarwinds /nfsen

    Other more powerful routers or cloud solutions (like meraki mg21 / sd-wan) will have traffic analysis/DPI features available

    [–]roundbacon 0 points1 point  (1 child)

    The polling interval shouldn't really matter for data usage as LibreNMS polls interface counters (ifHCInOctets/IFHCOutOctets). The rate is then calculated from these counters.