Is there a way to see which connection uses the most bandwith? In Status → Connections I see all connections, which is great. But to find out which connections uses a lot bandwith seems hard to me. Somehow a sorting feature for Data Transfer would be great.
Or do I overlook something?
Similar topics have been discussed on the forum.
I hope you find the guidance you need.
https://community.ipfire.org/t/network-monitoring-on-each-interfaces
https://community.ipfire.org/t/finding-who-generates-traffic
https://community.ipfire.org/t/traffic-graphs-from-green
Regards
Hallo @diver
Welcome to the IPFire community.
The following addon might help.
https://www.ipfire.org/docs/addons/pmacct
HI all,
currently not sure if someone wants to check it https://github.com/ummeegge/IPFire-Pmacct-Web-Interface since it is under development and it currently works only with the memory plugin (standard after Pakfire installation) .
Current key features:
If someone wants to give it a try/test, feel free to do so and feedback for bugs and new ideas might be nice 
.
This sound interesting. I will test it out soon I hope.
No problem, just do what you can or want
I haven’t had the time to write a more detailed README.md, but if you’d like to get a deeper insight, you can find some more information here: ummeegge/IPFire-Pmacct-Web-Interface | DeepWiki (not written by me but i like it 
).
Best,
Erik
Hi, I tried installing the component on a test machine.
One thing I noticed is that it only shows traffic on the green and red networks, not the blue ones.
What did I do wrong?
Hi @tratru,
great question
The pmacct.conf did it and pmacct.cgi expects it like this:
https://git.ipfire.org/?p=ipfire-2.x.git;a=blob;f=config/pmacct/pmacct.conf;h=79e3fd6a74460bed55faf0672291553566efd8ae;hb=refs/heads/core198
The default configuration after a Pakfire install is here (green0):
https://git.ipfire.org/?p=ipfire-2.x.git;a=blob;f=config/pmacct/pmacct.conf;h=79e3fd6a74460bed55faf0672291553566efd8ae;hb=refs/heads/core198#l11
therefor you see what you see. To answer a potential next question in advance — yes, it’s possible to get more interfaces with pmacctd, but you’ll need to set up an appropriate interfaces.map file. In addition, a suitable CGI script would need to be created to handle it. .
Best,
Erik
Can this be used in combination of the DNS as well? Because destination IPs won’t tell you what kind of “service” had been used., if it’s an AWS server etc.
Hi, I haven’t checked it thoroughly yet, but by making this change, I was able to have both the network and Blu at the same time.
I modified the pmacct.conf file.
The string to change is this:
pcap_interfaces_map: /etc/pmacct/interfaces.map
I added a new file in the same directory called interfaces.map
with these instructions:
ifname=green0 ifindex=100 direction=in
ifname=blue0 ifindex=101 direction=in
Hi all,
made a fast one with libloc and the “AS name” and the country flag. May this fit your needs too ? It looks currently like this
Great news @tratru will give it a try after the weekend with a little more time .
Some changes has been made and all has been pusht to the repo.
Best,
Erik
Hello @diver / Silvan
Welcome to the community !
Personally, I use SARG (Squid Analysis Report Generator) and I wouldn’t change it. Its interface might be a bit dated, but I find it very user-friendly and the information it provides is truly relevant.
The information gathered : Top sites, Sites & users, Downloads, all sorted by IP address (it’s just missing the associated name of the machine concerned and it would be perfect).
Sadly no. My intent is to detect any “illegal” use of services, such as video streaming of my kids, that may cause me trouble. Therefore it will be greate to log the device (source), the destination (URL) and the amount of traffic (for example per day).
