NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
Forum Discussion
Orbi RBK50 Massive data usage and traffic meter is half of what ISP sees
Since setting up my Orbi I have had great coverage and everything is running quite fast. I really want to love this thing, but the crazy data usage is kiling me. I got an email from my ISP that I ha...
AlmostHappy wrote:The totals Orbi shows me are consistent with what I have been using for the past year. After a ton of time on the phone with the ISP ( I was sure it was on their side) after shutting down my wifi (nothing hardwired) for a couple hours, Orbi shows no data in the traffic meter. However, the ISP shows 2.5GB. When I shut down the Orbi completely for two hours, there is no data usage from my ISP. What the hell is Orbi doing that uses that much data when there are no clients on it?
How was WiFi "shut down"? (I have wanted to do this and have not found the right "box to check".)
It might be interesting to capture the Network traffic using Orbi's debug feature:
Connect to http://orbilogin.net/debut.htm
Check the box "Enable LAN/WAN Packet Capture"
Check "Start Capture"
Collect data. (at a rate of about 1GB/hour, this will not take very long. 10 miinutes should be plenty)
Uncheck the box "Enable LAN/WAN Packet Capture"
Click "Save Debug Log"
The debug-log.zip file contains two files: LAN and WAN. These files are "PCAP" files that can be read with a number of free programs. I use Wireshark, which is free for Windows and Mac (from http://wireshark.org).
The WAN file shows all traffic between the Orbi and the internet. (If your ISP is like mine, there will be TONS of ARP broadcasts and garbage that can be filtered out by using a display filter with the public IP of the Orbi.)
The LAN file shows all traffic on the LAN side.
If WiFi is shut down, there should be nothing on the LAN side. With Traffic Meter reporting zero, there should be nothing on the WAN side.
It would be tempting to suspect the ISP modem of playing some (evil) part in this. If just having power on the Orbi, but no users creates 1GB/hour, something is amiss. The ISP modem is "just a modem", correct? No router? No WiFi?
CrimpOn from the Orbi app I disabled every client. It is a bit of a pain as each disable causes a refresh so it takes a bit if you have a lot of clients.
I will try the debugging tonight and see what that shows.
As for the modem, it is my modem and not from the isp. I can’t think of the brand and model right now, but it is just a modem, no router or WiFi.
I will try the debugging tonight and see what that shows.
As for the modem, it is my modem and not from the isp. I can’t think of the brand and model right now, but it is just a modem, no router or WiFi.
AlmostHappy wrote:
CrimpOnfrom the Orbi app I disabled every client. It is a bit of a pain as each disable causes a refresh so it takes a bit if you have a lot of clients.It might be faster to just change the Orbi SSID. That should disconnect all of the clients at once. Back when I was doing "Factory Resets" and setup from scratch (more times than I enjoyed), I would leave the Orbi with the default SSID until I had created all of my device reservations, DHCP pools, etc. etc. THEN, I would change the SSID to my preferred one (I have kept the same WiFi SSID/Password through the past four WiFi systems so that none of my devices need to be set up again.) BOOM, everything would connect and get the IP address I wanted them to have.
The reason I ask about the modem is that strange phenomenon of the Orbi saying "nothing happening" and the ISP saying "1GB/hr". I am looking for for packets to be flying around when only the two devices are active.
I also have never given much thought to what exactly an ISP measures in terms of "traffic." Is it "up" and "down" both? Does it count "broadcast" packets from other subscribers? (i.e. I "receive" them, but I didn't ask for them, and don't "want" them.)
CrimpOn WOW!! Even just 5 minutes running the debug is with only the router on (changed SSID, so much quicker) got so much. I installed wireshark and took a look at the wan file. Man I am lost. There is so much info in there and none of it really means much to me at a first glance. I will have to read up on the tool and what I am looking at.
1qwerty1 I am going to pick up a pi and setup pi hole tomorrow. I will filter that list you posted and see if that helps. My ISP (Comcast) can't seem to find the right person to help me get data usage in realtime or even one day chunks (Monday's call they did, but now they don't have that access) and they can only see my current monthly usage. Once I get the pi hole running and block those sites, I should be able to compare my routers daily usage and just do the math for them (delayed by 24 hours).
Thank you all for pointing me in the right direction. I will update here after a few days of running it and see how things are going.
Can you park the WAN and LAN capture files on cloud storage somewhere (Google Drive, DropBox, etc.) and post a link (or send me a private message with the link). I am really puzzled what can be "going on" when the Orbi has zero devices connected. Would love to look through the capture files.