Hi Kev
I cannot comment if this is right, not familiar with tcpstat
Sorry I just meant in relation to the amount of traffic you see on other OGN-R's?
FYI I left it running overnight on a 'traffic per hour' basis (post below was traffic per 5 seconds basis):
tcpstat -i eth0 -p -o 'Time: %S\tBytes: %N\n' -f 'ether host gateway and not host gateway' 3600
Time: 1584468258 Bytes: 21503103
Time: 1584471858 Bytes: 17313235
Time: 1584475458 Bytes: 18410907
Time: 1584479058 Bytes: 20850647
Time: 1584482658 Bytes: 13589395
Time: 1584486258 Bytes: 10110604
Time: 1584489858 Bytes: 7475430
Time: 1584493458 Bytes: 6430814
Time: 1584497058 Bytes: 5676640
Time: 1584500658 Bytes: 6181948
Time: 1584504258 Bytes: 6395193
Time: 1584507858 Bytes: 10342799
Time: 1584511458 Bytes: 11942474
Time: 1584515058 Bytes: 12832665
Time: 1584518658 Bytes: 17437069
Time: 1584522258 Bytes: 21630787
tcpstat -i eth0 -p -o 'Time: %S\tBytes: %N\n' -f 'not ether host gateway and not port ssh and not port 30002' 3600
Time: 1584468255 Bytes: 1435826
Time: 1584471855 Bytes: 1384792
Time: 1584475455 Bytes: 1444220
Time: 1584479055 Bytes: 1622926
Time: 1584482655 Bytes: 1739139
Time: 1584486255 Bytes: 1710299
Time: 1584489855 Bytes: 1578186
Time: 1584493455 Bytes: 1642774
Time: 1584497055 Bytes: 1665130
Time: 1584500655 Bytes: 1555733
Time: 1584504255 Bytes: 1604856
Time: 1584507855 Bytes: 1527436
Time: 1584511455 Bytes: 1620178
Time: 1584515055 Bytes: 1700773
Time: 1584518655 Bytes: 1584247
Time: 1584522255 Bytes: 1804454
You can see the overnight dip very nicely, going down to 5 or 6 MBytes per hour overnight, compared to 20 MBytes of so an hour during the day. Where the local network traffic stays relatively flat at about 1.6 MBytes per hour.
But, assuming it is
Can you rerun the test with the rtlsdr-ogn service both up and down ?
Yes,
Right now. with rtlsdr-ogn running, we have about 40 KBytes per 5 seconds going out the gateway and 1 KByte per 5 seconds staying local
Right now, without rtlsdr-ogn running, we have about 14 KBytes per 5 seconds going out the gateway and 1 KByte per 5 seconds staying local
So interested to see what the 14 KBytes per 5 seconds is... it largely seems to be port 9993 udp, which appears to be the zerotier-one VPN you use.
Stopping zerotier-one, we go down to 2 KBytes per 5 seconds going out the gateway (mainly things still trying to talk to 9993 and the ICMP port unreachable replies!) and 1 KByte per 5 seconds staying local
Did you install tcpstat, or is it in the distro ?
Also, can this count incoming packets ?
I installed it - apt update; apt install tcpstat tcpdump --fix-missing
Yes it can count packets too:
%n' the number of packets
%T' the number of TCP packets
%U' the number of UDP packets
%I' the number of IPv4 packets
%V' the number of IPv6 packets
'Incoming only' could be done in the filter.
Thanks
Kev