Bandwidthd installation

Hello All,
Recently I have been billed heavily for internet usage. so I thought of checking my usage at router level. I installed bandwidthd and below is image from it. is router and I am surprised, it downloaded 8.2GB. is this correct ? how and what is router downloading ?

It does not total for its client. am I making mistake in understanding ?

Your input to interpret the information is required.

It depends on what your router is configured to do - and how well bandwithd can distinguish between the real source/ target of the traffic (disclaimer, I've never used this package myself).

Just to raise some potential causes for confusion:

  • you may have installed services on the router itself that generate traffic (e.g. aria2, torrent clients, etc.)
  • services that might cause 'hidden' traffic (e.g. CAKE w/ Adaptive Bandwidth generates traffic to evaluate to currently available bandwidth)
  • traffic bandwidthd might not be able to account properly for their real owner (e.g. VPN stuff might be miscalculated, depending on how the tunnel endpoint is configured, other forms of tunneling might be misassigned similarly (e.g. IPv6 transition mechanisms)).

By default, OpenWrt shouldn't cause 'much' traffic for its own needs (it just needs to keep the internet connection going and semi-regularly sync the time over ntp). Just for a rough rule of thumb, in the last 19 days of this month, my router is accounted for under ~25 MB traffic by nlbwmon so far (and that includes adblock blocklist updates, a non-default feature), while over half a TB of traffic has been passed through it.


Think in terms of your local network rx/tx traffic and not rx/tx traffic between your gateway ip and your ISP.

Bandwidthd uses a libpcap format filter string to control what bandwidthd see's, so you really shouldn’t capture your gateway and broadcast traffic statistics.

Try changing your /etc/config/bandwidthd option filter setting to option filter='ip and not host and not host’

This will just capture your local subnet clients rx/tx traffic which for the most part is all inbound/outbound traffic through your gateway to/from your ISP.

EDIT: I should have mentioned this community member initiative to track/restrict clients via quota using Bandwidthd.

You should (if you are not already) really start using blocklists. Auto-play websites, tracking and adds are bandwidth hogs.

This router has every thing as factory setup along with adblock.

I dont think, Adblock has this downloaded this much defination.

Did you read my post? where did Adblock come from?

My 2 cents, if I where guessing:

  1. Do you have ping running somewhere?
    eg: VPN script

  2. Something might be compromised
    eg: spamming or DDOSing.

I have installed it from official post.

No vpn.

This is official factory image with adblock installed. I can share running process information if needed.

Now installed nlbwmon lets see how different results comes. will compare both.

Naught but fud and conjecture with no evidence to support your guess yet.

As explained:

Bandwidthd by default will track tx/rx on every ip by protocol in each configured subnet. This behaviour can be further refined through a Libpcap format filter string.

Based on the OP”s use case (reconciling ISP excess bandwidth charges), the OP should just track his local subnets sans gateway/broadcast traffic. This will enumerate all clients total traffic which should approximate the ISP’s numbers plus of course any overhead.

I never referenced anything about adblocking!

Comparison is futile. Different principles, but they approximate reasonably well in my experience. Vnstat2 as well.