On Mon, Feb 10, 2020 at 7:41 AM Andrew Lunn <andrew at lunn.ch> wrote: > > On Mon, Feb 10, 2020 at 06:48:21AM -0600, o1bigtenor wrote: > > Greetings > > > > I have started monitoring, in a gross kind of way, my internet usage > > starting by using the 24hr graph on my router software (opensource). > > OpenWRT? I wish - - - - still on dd-wrt. (Want to change but that's not as easy as it do as it sounds - - - - grin!) > > If so, just install tcpdump. You probably don't have disk space to > save an unfiltered capture file on your router, so from your Linux > desktop, use something like script(1) to log the console, ssh into the > router, and run tcpdump on the WAN port. > > You can then look at the log, and maybe narrow down the > source/destination, or protocol. Run tcpdump with a filter and capture > the frames into a pcap file. If you are worried about disk space, look > at the -c and -C options. Copy the capture off the router and use > wireshark to look at the traffic in more detail. > So wireshark - - - - it lets you see who or what is shipping you info even when you're not at the system? TIA