I have noticed that my tunnel client is processing a tremendous amount of data through my network. In the last 24 hours it has downloaded 1.6GB and uploaded 95MB of data. I have not been using the node and no computers are connected to the system currently, so I don't know what this could be. When I do a packet inspection it shows the majority of this is "Unknown" data. My guess is that somehow all the traffic on the tunnel servers end is passing though my node somehow, but thats just a guess. Any thoughts? Thanks!
Theme by Danetsoft and Danang Probo Sayekti inspired by Maksimer
did you have "Mesh Gateway/Allow others to use my WAN" enabled?
I remember seeing about 150Kbps of constant traffic when connecting to a big mesh like those in California. That's about 1.5GB/day of mostly routing updates.
Good catch KX5DX. Yes he is out here in SoCal, and you are right, there is a lot of traffic. OLSR entries from my hAP (also in the SoCal network):
Nodes = 449
If you install the tcpdump package, then it is possible to see the live traffic on a mesh node. (If using a nightly build, be sure to get current version, then install the package.) on the node, do an "ifconfig" command to see the interfaces. An interface of, e.g. eth1.2 (looking for one with ".2", which means vlan 2) to see traffic going in/out the dtdlink interface. to see tunnel traffic, look for a "tun*" interface.
On my hap ac lite over the dtdlink, the command is "tcpdump -i eth1.2 port 698" to see all the olsr packets. In one second on the SoCal mesh, it looks like this:
09:15:20.073546 IP dtdlink.AE6XE-NSM3-QTH.local.mesh.698 > 10.255.255.255.698: OLSRv4, seq 0x304e, length 1452
09:15:20.132813 IP dtdlink.AE6XE-haplite-qth.local.mesh.698 > 10.255.255.255.698: OLSRv4, seq 0xb350, length 52
09:15:20.178186 IP dtdlink.AE6XE-NSM3-QTH.local.mesh.698 > 10.255.255.255.698: OLSRv4, seq 0x304f, length 776
09:15:20.371296 IP dtdlink.AE6XE-NSM3-QTH.local.mesh.698 > 10.255.255.255.698: OLSRv4, seq 0x3050, length 1456
09:15:20.471120 IP dtdlink.AE6XE-NSM3-QTH.local.mesh.698 > 10.255.255.255.698: OLSRv4, seq 0x3051, length 1464
09:15:20.475170 IP dtdlink.AE6XE-NSM3-QTH.local.mesh.698 > 10.255.255.255.698: OLSRv4, seq 0x3052, length 1468
This is about 7kb/sec incoming rate (from my ae6xe-nsm3-qth node on the roof). This is about 605M per 24hr day.
Do you have a gateway advertised? Someone downloading windows updates, etc.?
To see the traffic routing though your mesh node (or any connection the iptables or the firewall is tracking), do: "cat /proc/net/nf_conntrack". This may take some investigation/learning to interpret these connections (going through the NAT to the internet).
Joe AE6XE