Dear All,

I have been noticing (on the Draytek 2820 Diagnostics - Traffic Graph) that a hell of lot of unknown WAN traffic has been used. In way of an example, it shows 2.1GB of outbound traffic (TX) between 21:00 and 06:00 this morning.

I would like to find out what device on the network was using the bandwidth but am not sure what tools I can use to narrow down to the culprit. I think this has been going on a while and need any help to nail down the source.

Can someone please offer some advice on what to do in this situation?

Thanks in advance.

Brad

SmartMonitor is your best option, the other option is to watch the Data Flow Monitor aaall day but that's not so easy.

Thank tou.

Where can I find out the info on SmartMonitor?

Or WallWatcher

You can get SmartMonitor from here:
http://draytek.co.uk/products/SmartMonitor.html

There's some slightly outdated instructions for the setup on the router linked from that page - with 3.3.4.1 and later firmware, you can set up the monitor port from the LAN - LAN Monitor Port page, on there enable it, set the monitor port (radio button, select which one the PC running smartmonitor is plugged into) and tick the relevant tickboxes for the ports to monitor.
One limitation of it that could be a problem for you is that SM can't capture the packets from the router's wireless (cos it works using a switch function which is separate from the wireless module) - make sure you've got your wireless secured with WPA/WPA2 security, WEP or no security on your SSIDs could be causing your problems if someone's got onto your network that way.