Most of the time it comes back as a CDN, so you still don’t know who hired the CDN. Or something like AWS, and you still don’t know. The exceptions perhaps are Apple, Google/Youtube, and some Netflix.
From: That One Guy /sarcasm Sent: Thursday, September 15, 2016 8:44 PM To: [email protected] Subject: Re: [AFMUG] documenting customer usage "Torch their IP. Find the IP that is sending them lots of data. Punch that IP into bgp.he.net It will tell you who is sending the data and that normally can give them a hint." A. Is there a torch tool for long term monitoring, it seems real time to me" B, explain the HE thing, I have never seen anything in the looking glass that will tell me what our customers are soing, but then again I just learned how to read the routes On Thu, Sep 15, 2016 at 8:38 PM, Jim Bouse [Brazos WiFi] <[email protected]> wrote: Torch their IP. Find the IP that is sending them lots of data. Punch that IP into bgp.he.net It will tell you who is sending the data and that normally can give them a hint. Jim Bouse Owner Brazos WiFi 979-985-5912 [email protected] -------- Original message -------- From: That One Guy /sarcasm <[email protected]> Date: 9/15/16 8:36 PM (GMT-06:00) To: [email protected] Subject: [AFMUG] documenting customer usage so we got this: "Can yotu help us somehow figure out what is using all of our data? We have looked at the daily usage and can not figure it out. There are days that we have been gone for several hours and the usage is VERY high. Then days we are home have been extremely low. We are at a loss; can you help us or recommend someone who can. Is there a way to break this down hourly? Thanks! --" this is the one in ten request, the other 9 are normally "we didnt do this you people are lying,we never use the internet, our kids follow rules, youre cheating us" in a real catty voice screw those 9 douches, its usually one of the spouses porn affliction, the kids game console. or the fact they leave 5 units running in the house with netflix on autoplay, if theyre not illegally torrenting some shit. but, there is the one, who arent cocks, they genuinely want to know. We arent providing them a router, so monitoring from there directly is out we just recently moved DNS to us (huge value I have already found) So whats the best way (to the account, not the individual machine) to track this down, in our environment, We have mikrotik 1100ahx2 from to AP to the edge, and for the firs time, I actually want to set up a tool to help the 10 percent and if you guys who know more than me can spit out a script to drop in to monitor this customer I can pretend I have value within th company. . If you only see yourself as part of the team but you don't see your team as part of yourself you have already failed as part of the team. -- If you only see yourself as part of the team but you don't see your team as part of yourself you have already failed as part of the team.
