My service provider (rogers.com) has implemented a new bandwidth cap. I check their usage page and the numbers on previous days (sometimes weeks before) seem to change.

Ie on Apr 11th my bandwidth usage for 9th was 689M, today that same day reads 2G. (Also I might add for the 8-10th the modem ether cable was unplugged) Rogers explanation is that my wife must be secretly plugging the ether cable back in with out my knowledge.


So I now have a bandwidth monitor on my router tracking total usage going in and out of the WAN ports. I also have a poweredge router with stats on each physical network line. I'd like to go further and monitor traffic on the actual machines. I'd like to see which services/ports are generating the traffic.

Is there any way to do this? I have squid monitor http traffic but how do I do the rest of the ports?


And yes... I know I need a new service provider. I'm ordering two DSL lines and bridging them.....

How about ntop or darkstat?

Ntop does the trick thanks.