Bandwidth graph interpretation

Discussion in 'Tomato Firmware' started by AXXEL, Nov 28, 2011.

  1. AXXEL

    AXXEL Networkin' Nut Member

    Is there a link to a tutorial on how to interpret graph data?

    I seem to have Rx and Tx activity even when all computers have been off overnight.

    Also, is WAN (vlan1) what would report overall data activity when one is concerned with bandwidth caps with ISP? I can sit there in real time, with all my network devices disconnected from the network/internet, except for the one I am using to log into my router and look at the real time, and it still shows Rx and Tx activity. Maybe I am not understanding the graph correctly.
  2. teaman

    teaman LI Guru Member

    I assume we're talking about the Bandwidth -> Real-Time page, right?

    Then, please have a look at this:

    Also, some Tomato mods/builds include a feature called IP Traffic Monitoring, which allows tracking any/all network traffic for each device on your LAN:


    Related links:
  3. Toastman

    Toastman Super Moderator Staff Member Member

    If there's traffic, then something is sending that traffic. The bandwidth monitoring facilities should be able to show what it is.

    If you are connected to the router's GUI with a browser, then most probably your browser is making some extra connections. Most browsers are usually making connections all the time which most people aren't aware of. Particularly if you have any browser toolbars, utilities or addons installed. Many cookies are often running and communicating with advertising services and update checks for installed software - and many other things that you've picked up on visits to websites.

    There will be comms. traffic between your router and the ISP. There will be DNS traffic. There may be Teredo (IPv6) traffic from Windows machines. There may be some broadcast traffic that you don't know about.

    If all your computers are truly OFF, and there's still traffic, try turning off the router's wireless and pulling all cables out of the LAN ports. Next morning check the graphs again. Any traffic that's left must be from your router. You should be able to figure out what it is.
  4. AXXEL

    AXXEL Networkin' Nut Member

    This is what I did overnight; turned off the wireless and disconnected LAN ports. This morning when I logged back into the router, the bandwidth graph for the last 4 hrs showed 16Mb of traffic.

    What should my next step be?

    I have the WRT54G v2.0 with Tomato Firmware v1.28.1816. My ISP is Time Warner cable/RoadRunner in NYC.

    Thank you for your time.
  5. OldTimeCoder

    OldTimeCoder Addicted to LI Member

    The way that I keep traffic out of my SOHO network is mechanical. I have a QVS Commercial DataSwitch sitting between my Roadrunner cable modem and my E3000 with Tomato Firmware v1.28.7483 MIPSR2-Toastman-RT K26 USB VPN. my family knows that the (A) setting is to Access the net and (B) to Block access. The A side goes to the E3000 and the B side is empty, so it goes to the bit-bucket. So, nighttime or when we leave home we turn the net off. Doesn't seem to have any effect on the cable modem, I'll keep the same RR DHCP IP address for weeks.
    Just my $0.02 worth
    /s/ BezantSoft
  6. AXXEL

    AXXEL Networkin' Nut Member

    Thanks! Just curious, have you ever noticed how much activity you have when your network is idle or disconnected? I average about 4Mb/hr. I like your setup to have a quick disconnect.
  7. Toastman

    Toastman Super Moderator Staff Member Member

    If this worries you, you have to discover what the traffic is and whether or not it is originating on your router, and whether it should be occurring. You have to do that yourself or just don't worry about it. It's a rather small overhead and probably quite normal. Routers do continually "talk" to the ISP and other services, there can be background comms all the time. Whether that contributes to a monthly quota depends on your ISP.

    If you want to turn off your connection at night, just use the disconnect button. Or you can use the scheduler or run a script to do the same every night at predetermined times
  8. OldTimeCoder

    OldTimeCoder Addicted to LI Member

    'Preciate the compliment. AFIK, I don't see a whole lot, looking back at what logs I've kept. It's kind of reassuring when All the syslog shows are the hourly markers....:)
    Although, if my Androids are on WiFi there is the connection "wake up", no activity and then sleep routine the Androids (all 3) do, unless you toggle it off in the UI for each phone. Son's original Nook WiFi will also poll the wireless from time to time, but he usually keeps it off.

    Wouldn't there be a small amount of traffic, even if all the LAN side devices were down? I mean things like NTP services, DDNS refreshes as scheduled and the like?

    /s/ BezantSoft
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Dismiss Notice