Torch their IP. Find the IP that is sending them lots of data. Punch that IP into bgp.he.net It will tell you who is sending the data and that normally can give them a hint.
Jim Bouse Owner Brazos WiFi 979-985-5912<tel:979-985-5912> j...@brazoswifi.com -------- Original message -------- From: That One Guy /sarcasm <thatoneguyst...@gmail.com> Date: 9/15/16 8:36 PM (GMT-06:00) To: af@afmug.com Subject: [AFMUG] documenting customer usage so we got this: "Can yotu help us somehow figure out what is using all of our data? We have looked at the daily usage and can not figure it out. There are days that we have been gone for several hours and the usage is VERY high. Then days we are home have been extremely low. We are at a loss; can you help us or recommend someone who can. Is there a way to break this down hourly? Thanks! --" this is the one in ten request, the other 9 are normally "we didnt do this you people are lying,we never use the internet, our kids follow rules, youre cheating us" in a real catty voice screw those 9 douches, its usually one of the spouses porn affliction, the kids game console. or the fact they leave 5 units running in the house with netflix on autoplay, if theyre not illegally torrenting some shit. but, there is the one, who arent cocks, they genuinely want to know. We arent providing them a router, so monitoring from there directly is out we just recently moved DNS to us (huge value I have already found) So whats the best way (to the account, not the individual machine) to track this down, in our environment, We have mikrotik 1100ahx2 from to AP to the edge, and for the firs time, I actually want to set up a tool to help the 10 percent and if you guys who know more than me can spit out a script to drop in to monitor this customer I can pretend I have value within th company. . If you only see yourself as part of the team but you don't see your team as part of yourself you have already failed as part of the team.