Inaccuracy - Traffic Monitor

[Kubbie]

Hi. Is this problem still happening in version 372.31_0? I just upgraded from 270.26 and noticed that the daily global totals still differ from the daily per device grand total.

 

[RMerlin]

No, all reproducible issues have been resolved a few months ago.

 

[Kubbie]

Thank you for the reply and thank you for working on this firmware and answering our questions.

I am attaching two screenshots. One of the Global Daily total and the other of the Per Device Daily total.

They have never matched up. The monthly shows differences in the GB. Since I just updated the firmware this past Sunday, I am only showing the daily since that would reflect changes after the firmware update to the newest version.

Is there maybe something in one of the setting I am missing that is causing this difference between Global and Per Device totals?

Also there is a third screenshot where I am displaying a Per Device Daily total for a day eariler in the month (date 7/9/13 to 7/9/13) and it is showing some wacky numbers. There are definitely missing IP addresses that were in use that day that are not in that list.

Again just wondering if I am missing something on this end setting wise that could explain why this might be displaying like this.

 

[RMerlin]

I am only showing the daily since that would reflect changes after the firmware update to the newest version.

Also there is a third screenshot where I am displaying a Per Device Daily total for a day eariler in the month (date 7/9/13 to 7/9/13) and it is showing some wacky numbers. There are definitely missing IP addresses that were in use that day that are not in that list.

Per Device stats were known to be inaccurate in previous builds, so it's no surprise that the data compiled before your recent upgrade would be incorrect.

I can re-test things again sometime later for the more recent differences you are noting, but last time I worked on it, I was unable to create any inconsistencies between both traffic monitoring methods in the various scenarios that I tested.

One thing to keep in mind is that the daily global traffic most likely includes traffic seen by the router itself - that traffic isn't counted in the per device traffic since it never reaches any client. That would be the case for instance for traffic blocked by the router firewall, or from the router services such as DNS, AiCloud, etc.... Measurements are done at different points in the network path. IPTraffic is done in the Forward chain, which only includes traffic actually reaching a client device.

 

[Kubbie]

Thank you. Checking today, first day of the new month, there is a difference of about 200M. (new files attached).

I cleared/reset the files (Under Tools/Other Settings/Create or reset data files & Create or reset IPTraffic data files) yesterday and had the router create all new files.

If there is anything I can do to help troubleshoot let me know. I am not a expert on the command line stuff, but I will do what I can.

 

[RMerlin]

As noted, the difference between both comes from the fact that the measurements are taken at two different points in the whole network. One is at the entrance of your router interface (the global traffic), the other is in the forwarding chain of Netfilter. Any traffic dropped by the firewall or terminated at the router (connection attempts on closed ports, etc...) will only be accounted in the global monitoring. This is normal.

 

[Kubbie]

Thank you. I understand. Is there a way to see what is being blocked? The missing amount seems to indicate there is a lot of traffic coming in that is being blocked by the firewall.
I am wondering if there might be a easy way to track whats being blocked since it is probably eating up a good bit of my monthly bandwidth.

 

[DrTeeth]

Kubbie, if it is being blocked. by the firewall, it is not being downloaded AIUI. How can it be downloaded if it is blocked?