A program to control all Internet traffic of an organization. Principles of organizing IP traffic accounting

Instruction

As a rule, data occurs in two ways: by direct connection to a remote computer, as a result of which the hacker is able to browse the computer's folders and copy the information he needs, and using Trojans. Finding the work of a professionally written Trojan is very difficult. But there are not so many such programs, so in most cases the user notices some oddities in the operation of the computer, indicating that it is infected. For example, attempts to connect to the network, strange network activity when you do not open any pages, etc. and so on.

In all such situations, it is necessary to control the traffic, for this you can use the regular Windows tools. Open the command prompt: "Start" - "All Programs" - "Accessories" - "Command Prompt". You can also open it like this: "Start" - "Run", then type cmd and press Enter. A black window will open, this is the command line (console).

Type netstat –aon at the command prompt and press Enter. A list of connections will appear showing the ip addresses your computer connects to. In the "Status" column, you can see the connection status - for example, the ESTABLISHED line indicates that this connection is active, that is, it is present in this moment. The column "External address" contains the ip-address of the remote computer. In the column "Local address" you will find information about the ports open on your computer through which connections are made.

Pay attention to the last column - PID. It contains the identifiers assigned by the system to the current processes. They are very useful in finding the application responsible for the connections you are interested in. For example, you see that you have a connection established through some port. Remember the PID, then in the same command line window, type tasklist and press Enter. A list of processes will appear, in its second column the identifiers are indicated. By finding the already familiar identifier, you can easily determine which application established this connection. If the name of the process is unfamiliar to you, enter it into a search engine, you will immediately receive all the necessary information about it.

To control traffic, you can also use special programs - for example, BWMeter. The utility is useful in that it can completely control the traffic, indicating which addresses your computer connects to. Remember that when properly configured, it should not go online when you are not using the Internet - even if the browser is running. In a situation where the connection indicator in the tray now and then signals network activity, you need to find the application responsible for the connection.

NetBalancer - a free version of a rather serious program for monitoring and controlling Internet traffic, designed to work in Windows operating systems. By setting this software, You can now fully monitor the activity of applications, increase or vice versa lower the priority of using your Internet connection channel by running programs.

Net Traffic - a simple free tool for monitoring network connection speed with a statistics function. This software will allow you to track the amount of downloaded or sent data on a convenient graph, as well as in text format. The built-in function for collecting and processing statistics will allow you to receive data for various periods of time at any time, including the status of the current moment.

TMeter is a free version of the program for accounting traffic and organizing Internet access for machines running on Windows operating systems. Using the TMeter program, you will be able to receive flexible and accurate traffic counting by any sign. This can be source/destination IP address, protocol, port, and so on. In real time, the collected statistics are displayed on the screen, in addition, you can choose in what form to display, in graphical or digital form.

NetWorx- is a simple and free, but powerful tool that allows you to objectively evaluate the bandwidth of your connection. You can use it to collect data about bandwidth connection and measure the speed of your internet or any other network connection. NetWorx can help you identify possible sources of network problems, make sure you don't exceed the bandwidth limits received from your ISP, or monitor for suspicious characteristics Trojan horse network activity and hacker attacks.

bitmeter is a free program traffic count and maintaining statistics. The program also has additional functions such as: a calculator for convenient calculation, for example, the time spent on downloading a file. It is possible to set the output of warnings, for example, about exceeding the time of work on the Internet or about the amount of possible traffic.

Woobind Network Meter - a handy free program that was created to keep records of Dial Up and LAN network traffic. In addition, it can keep track of the expenditure of monetary units when paying per megabyte for traffic. A friendly pleasant interface will allow you to comfortably and effectively control traffic consumption. Numerous settings and options allow you to customize the application individually.

NetSpeedMonitor - the simplest tool for constantly monitoring network connections. The user gets a lightweight toolbar for monitoring and managing connections. The program supports all Windows operating systems starting from XP version. The program will allow you to control the connection speed, the amount of data transferred. The program allows you to view detailed reports, and a single period. Your traffic is now under complete control.

Network Traffic Monitor - a free program that will allow you to track data transfer in local network from your computer. Allows you to track the speed, the amount of data. The program has many settings, despite its extremely small size. Already from the tray, the user will be able to configure auto-hide, the location of the window to constantly monitor network connection loading. You can also open the help file, which fully describes all the features and functions and go to more serious application settings.

Any administrator sooner or later receives an instruction from the management: "calculate who goes to the network and how much he downloads." For providers, it is supplemented by the tasks of "letting anyone in, taking payment, restricting access." What to count? How? Where? There is a lot of fragmentary information, they are not structured. We will save the novice admin from tedious searches by providing him with general knowledge and useful links to the materiel.
In this article I will try to describe the principles of organizing the collection, accounting and control of traffic on the network. We will consider the problematics of the issue, and list possible ways retrieval of information from network devices.

This is the first theoretical article in a series of articles dedicated to the collection, accounting, management and billing of traffic and IT resources.

Internet access structure

In general, the network access structure looks like this:

• External resources - the Internet, with all sites, servers, addresses and other things that do not belong to a network that you control.
• An access device is a router (hardware or PC-based), switch, VPN server or hub.
• Internal resources - a set of computers, subnets, subscribers, whose work in the network must be taken into account or controlled.
• Management or accounting server - a device that runs specialized software. It can be functionally combined with a software router.

In this structure, network traffic flows from external resources to internal, and vice versa, through the access device. It sends traffic information to the management server. The control server processes this information, stores it in the database, displays it, issues lock commands. However, not all combinations of access devices (methods) and collection and management methods are compatible. ABOUT various options and will be discussed below.

Network traffic

To begin with, it is necessary to define what is meant by "network traffic" and what useful statistical information can be extracted from the user data stream.
IP version 4 remains the dominant internetworking protocol so far. The IP protocol corresponds to the 3rd layer of the OSI model (L3). The information (data) between the sender and the recipient is packed into packets - having a header and a "payload". The header defines where the packet comes from and where (sender and destination IP addresses), packet size, payload type. The bulk of network traffic is made up of packets with UDP and TCP payloads - these are Layer 4 (L4) protocols. In addition to addresses, the header of these two protocols contains port numbers that determine the type of service (application) that transmits data.

To transmit an IP packet over wires (or radio), network devices are forced to “wrap” (encapsulate) it into a Layer 2 (L2) protocol packet. The most common protocol of this type is Ethernet. The actual transfer "to the wire" is at the 1st level. Usually, the access device (router) does not analyze packet headers at a level higher than 4th (an exception is intelligent firewalls).
Information from the fields of addresses, ports, protocols and length counters from the L3 and L4 headers of data packets make up the “source material” that is used in traffic accounting and management. The actual amount of information to be transferred is in the Length field of the IP header (including the length of the header itself). By the way, due to packet fragmentation due to the MTU mechanism, the total amount of data transmitted is always greater than the payload size.

The total length of the IP and TCP/UDP fields of the packet that are of interest to us in this context is 2...10% of the total packet length. If you process and store all this information batch by batch, there will not be enough resources. Fortunately, the vast majority of traffic is structured in such a way that it consists of a set of "dialogues" between external and internal network devices, the so-called "flows". For example, within a single transfer operation email(SMTP protocol) a TCP session is opened between the client and the server. It is characterized by a constant set of parameters (Source IP address, Source TCP port, Destination IP address Destination TCP port). Instead of processing and storing information packet by packet, it is much more convenient to store flow parameters (addresses and ports), as well as additional information - the number and sum of lengths of transmitted packets in each direction, optionally session duration, router interface indices, ToS field value, and so on. This approach is beneficial for connection-oriented protocols (TCP), where it is possible to explicitly intercept the moment the session ends. However, even for non-session-oriented protocols, it is possible to aggregate and logically complete a stream record by, for example, a timeout. Below is an excerpt from the SQL database of our own billing system that logs information about traffic flows:

It should be noted the case when the access device performs address translation (NAT, masquerading) to organize access to the Internet for computers on the local network using a single, external, public IP address. In this case, a special mechanism performs the substitution of IP addresses and TCP / UDP ports of traffic packets, replacing internal (not routable on the Internet) addresses according to its dynamic translation table. In this configuration, it must be remembered that in order to correctly record data on internal network hosts, statistics must be collected in a way and in the place where the translation result does not yet “anonymize” internal addresses.

Methods for collecting information about traffic / statistics

You can capture and process information about passing traffic directly on the access device itself (PC router, VPN server), transferring it from this device to a separate server (NetFlow, SNMP), or “from the wire” (tap, SPAN). Let's analyze all the options in order.

PC router

Consider the simplest case - an access device (router) based on a PC with Linux OS.

How to set up such a server, address translation and routing, much has been written. We are interested in the next logical step - information on how to obtain information about the traffic passing through such a server. There are three common ways:

• interception (copying) of packets passing through the server network card using the libpcap library
• interception of packets passing through the built-in firewall
• use of third-party tools for converting per-packet statistics (obtained by one of the two previous methods) into a stream of aggregated information netflow

libpcap

In the first case, a copy of the packet passing through the interface, after passing through the filter (man pcap-filter), can be requested by a client program on the server written using this library. The packet arrives with a Layer 2 (Ethernet) header. It is possible to limit the length of the captured information (if we are only interested in the information from its header). Examples of such programs are tcpdump and Wireshark. There is a Windows implementation of libpcap. In the case of using address translation on a PC router, such interception can only be performed on its internal interface connected to local users. On the external interface, after translation, IP packets do not contain information about the internal hosts of the network. However, with this method, it is impossible to take into account the traffic generated by the server itself on the Internet (which is important if a web or mail service is running on it).

The operation of libpcap requires support from the operating system, which currently comes down to installing a single library. In this case, the application (user) program that collects packages must:

• open required interface
• specify the filter through which to pass received packets, the size of the captured part (snaplen), the size of the buffer,
• set the promisc parameter, which puts the network interface into capture mode for all packets passing by in general, and not just those addressed to the MAC address of this interface
• set a function (callback) to be called on each received packet.

When transmitting a packet through the selected interface, after passing the filter, this function receives a buffer containing Ethernet, (VLAN), IP, etc. headers, total size up to snaplen. Since the libcap library copies packages, it is not possible to block their passage with it. In this case, the traffic collection and processing program will have to use alternative methods, for example, calling a script to place the specified IP address in the traffic blocking rule.

Firewall

Capturing data passing through the firewall allows you to take into account both the traffic of the server itself and the traffic of network users, even when address translation is running. The main thing in this case is to correctly formulate the capture rule and put it in the right place. This rule activates the transmission of the packet towards the system library, from where the traffic accounting and control application can receive it. For Linux OS, iptables is used as a firewall, and interception tools are ipq, netfliter_queue or ulog . For OC FreeBSD - ipfw with rules like tee or divert . In any case, the firewall mechanism is supplemented by the ability to work with the user program in the following way:

• A user program - a traffic handler registers itself in the system using a system call, or a library.
• The user program or an external script sets a rule in the firewall, "wrapping" the selected traffic (according to the rule) inside the handler.
• For each passing packet, the handler receives its contents in the form of a memory buffer (with IP headers, etc. After processing (accounting), the program must also tell the operating system kernel what to do next with such a packet - discard or pass it on. Alternatively, it is possible to transfer a modified packet to the kernel.

Since the IP packet is not copied, but sent to the analysis software, it becomes possible to "eject" it, and therefore, completely or partially limit traffic of a certain type (for example, to a selected local network subscriber). However, if the application stops responding to the kernel about its decision (hangs, for example), traffic through the server is simply blocked.
It should be noted that the described mechanisms, with significant amounts of transmitted traffic, create an excessive load on the server, which is associated with constant copying of data from the kernel to the user program. This shortcoming is deprived of the method of collecting statistics at the level of the OS kernel, with the issuance of application program aggregated statistics on the NetFlow protocol.

Netflow

This protocol was developed by Cisco Systems to export traffic information from routers for the purpose of traffic accounting and analysis. The most popular now version 5 provides the recipient with a structured data stream in the form of UDP packets containing information about the past traffic in the form of so-called flow records:

The volume of information about traffic is several orders of magnitude smaller than the traffic itself, which is especially important in large and distributed networks. Of course, it is impossible to block the transfer of information when collecting statistics on netflow (if you do not use additional mechanisms).
Currently becoming popular further development of this protocol is version 9, based on the flow record template structure, an implementation for devices from other manufacturers (sFlow). Recently, the IPFIX standard has been adopted, which allows statistics to be transmitted over protocols of deeper levels (for example, by application type).
The implementation of netflow sources (agents, probes) is available for PC routers, both in the form of utilities working according to the mechanisms described above (flowprobe, softflowd), and directly built into the OS kernel (FreeBSD: ng_netgraph , Linux: ). For software routers, the netflow statistics stream can be received and processed locally on the router itself, or sent over the network (transmission protocol - over UDP) to the receiving device (collector).


The collector program can collect information from many sources at once, being able to distinguish between their traffic even with overlapping address spaces. With the help of additional tools, such as nprobe, it is also possible to carry out additional data aggregation, stream bifurcation or protocol conversion, which is important when managing a large and distributed network with dozens of routers.

The netflow export functions support routers from Cisco Systems, Mikrotik, and some others. Similar functionality (with other export protocols) is supported by all major network equipment manufacturers.

libpcap "outside"

Let's complicate the task a little. What if your access device is a third party hardware router? For example, D-Link, ASUS, Trendnet, etc. On it, most likely, it is impossible to put an additional software tool for retrieving data. Alternatively, you have an intelligent access device, but it is not possible to configure it (no rights, or it is controlled by your provider). In this case, it is possible to collect information about traffic directly at the junction point of the access device with the internal network, using the "hardware" means of copying packets. In this case, you will certainly need a separate server with a dedicated network card to receive copies of Ethernet packets.
The server must use the packet collection mechanism according to the libpcap method described above, and our task is to submit a data stream identical to the output from the access server to the input of the network card allocated for this. For this you can use:

• Ethernet hub: A device that simply forwards packets between all of its ports indiscriminately. In modern realities, it can be found somewhere in a dusty warehouse, and this method is not recommended: it is unreliable, low speed(there are no hubs at a speed of 1 Gbps)
• Ethernet - a switch with the ability to mirror (mirroring, SPAN ports. Modern intelligent (and expensive) switches allow you to copy all traffic (incoming, outgoing, both) to the specified port of another physical interface, VLAN, including remote (RSPAN)
• A hardware splitter that may require installation to collect two network cards instead of one - and this is in addition to the main, systemic one.

Naturally, you can configure the SPAN port on the access device itself (router), if it allows it - Cisco Catalyst 6500, Cisco ASA. Here is an example of such a configuration for a Cisco switch:
monitor session 1 source vlan 100 ! where do we get packages from
monitor session 1 destination interface Gi6/3! where do we ship packages?

SNMP

What if there is no router under our control, there is no desire to contact netflow, we are not interested in the details of the traffic of our users. They are simply connected to the network through a managed switch, and we just need to roughly estimate the amount of traffic that falls on each of its ports. As you know, remotely managed network devices support and can display counters of packets (bytes) passing through network interfaces. To poll them, it would be correct to use the standardized SNMP remote management protocol. Using it, you can quite simply get not only the values ​​of the specified counters, but also other parameters, such as the name and description of the interface, MAC addresses visible through it, and other useful information. This is done both by command line utilities (snmpwalk), graphical SNMP browsers, and more sophisticated network monitoring programs (rrdtools , cacti , zabbix , whats up gold, etc.). However, this method has two significant drawbacks:

• traffic blocking can only be done by completely disabling the interface, using the same SNMP
• traffic counters taken via SNMP refer to the sum of the lengths of Ethernet packets (with unicast, broadcast and multicast separately), while the rest of the tools described earlier give values ​​relative to IP packets. This creates a noticeable discrepancy (especially on short packets) due to the overhead caused by the length of the Ethernet header (however, this can be approximately dealt with: L3_bytes = L2_bytes - L2_packets*38).

VPN

Separately, it is worth considering the case of user access to the network by explicitly establishing a connection to the access server. A classic example can serve as the good old dial-up, the analogue of which in modern world are VPN remote access services (PPTP, PPPoE, L2TP, OpenVPN, IPSEC)


The access device not only routes user IP traffic, but also acts as a specialized VPN server and terminates logical tunnels (often encrypted) within which user traffic is transmitted.
To account for such traffic, you can use both all the tools described above (and they are well suited for in-depth analysis by ports / protocols), as well as additional mechanisms that provide VPN access control tools. First of all, we will talk about the RADIUS protocol. His work is a rather complex topic. We will briefly mention that control (authorization) of access to the VPN server (RADIUS client) is controlled by a special application (RADIUS server) that has a database (text file, SQL, Active Directory) of valid users with their attributes (connection speed limits, assigned IP addresses). In addition to the authorization process, the client periodically sends accounting messages to the server, information about the status of each currently running VPN session, including counters of transmitted bytes and packets.

Conclusion

Let's summarize all the methods of collecting traffic information described above together:

Let's sum up a little. In practice, there are a large number of methods for connecting a network you manage (with clients or office subscribers) to an external network infrastructure using a number of access tools - software and hardware routers, switches, VPN servers. However, in almost any case, you can come up with a scheme when information about the traffic transmitted over the network can be directed to a software or hardware tool for its analysis and control. It is also possible that this tool will allow feedback with the access device, applying intelligent access restriction algorithms for individual clients, protocols, and more.
This concludes the analysis of materiel. Of the unresolved topics remained:

• how and where the collected traffic data goes
• traffic accounting software
• what is the difference between billing and a simple “counter”
• how to limit traffic
• recording and limiting visited websites

These are programs that allow you to track active connections across all network interfaces.

Modern tools for detailed and detailed traffic monitoring, as a rule:

• are fairly affordable;
• allow you to limit the speed of each connection separately;
• give a clear picture of what files and programs load the network and what speed they need to have;
• allow you to determine the sources of the highest traffic consumption.

The program will help you determine your priorities when using the network.

Today, there are many similar utilities for monitoring and planning traffic consumption.

CommTraffic

This is a program for controlling Internet traffic both in the local network (it monitors the Internet activity of several clients at once), and on personal computer using a modem connection. Accounting and statistics of work on the Internet will be displayed in the form of bandwidth graphs. They show the amount of outgoing, incoming and total traffic.

The program can be configured for almost any tariff plan, which is based on the set volume, takes into account the time of day and connection time. The CommTraffic utility is equipped with:

• convenient indication;
• accurate calculation of costs;
• the possibility of notification in case of overspending.

Besides, it is simple and convenient to use. Once you set a traffic and time limit that corresponds to your tariff plan, you will receive notifications with a sound signal or a message to the specified address when you approach the set limits.

Program for monitoring Internet traffic Network Meter

A network information collection application that allows you to monitor all network adapters installed in the system. It also provides detailed statistics about outgoing and incoming traffic. To get started, set up the downloaded program the first time you run it. To do this, specify what data you want to see in the main window, and the adapters that Network Meter will "monitor".

Minimize the utility window to the notification panel so that it does not take up space on the desktop. Even in this state, the application continues to work in the background.

The program will build graphs of the consumption intensity of the network connection in real time. It is not overloaded with unnecessary interface elements and settings. The graphical shell of the utility is clear and simple. You can also see with it:

• Internet session duration, MAC address and IP;
• connection type;
• cable throughput to the maximum.

By downloading Network Meter, you will get a fairly compact, simple and free tool. Great for monitoring traffic and viewing information about network equipment.

Internet traffic counter Simbad Traffic Counter

The utility keeps records of incoming and outgoing traffic, and also calculates, according to the tariff of your Internet provider, its cost. The display of consumed traffic is carried out in various values ​​(gigabytes, megabytes, kilobytes). In addition, the application keeps statistics. It will automatically detect the modem connection, display the time spent on the Internet. This program for monitoring Internet traffic practically does not consume system resources and has a small size. Supports work with a large number of protocols.

Net Activity Diagram Application

Net Activity Diagram, a program for monitoring traffic and Internet speed, monitors the Internet and network activity of a computer.

Produces:

• tracking all established connections;
• output of various warnings in the form of a message;
• traffic analysis for specified periods of time.

The current network activity is displayed both in a separate window and on the taskbar. In addition, the Net Activity Diagram service tracks statistics independently for each port and provides the ability to monitor each type of traffic separately.

The programs are quite flexible. It informs the user in cases of exceeding or approaching the established limits.

Traffic accounting using Internet Connection Counter

This program for monitoring Internet traffic will allow you to take into account the cost and time spent on the Internet, the total amount of traffic consumed. Supports Various types connections: Dial-Up, ADSL, LAN, GPRS, etc.

With this utility, the user can:

• use several Internet provider tariffs at the same time;
• get acquainted with the statistics on the traffic used;
• customize the appearance of the application.

In addition, the application will show all active connections, synchronize the system clock and export a report to Excel format.

Traffic saving program

HandyCache will allow you to significantly (3-4 times) through caching. The next time you visit the site, the application will help you not to download it from the Internet. In addition, you can view these sites and without an Internet connection, offline.

To get started, you need to install HandyCache and specify it in your browser as a proxy server. After that, all browsers you have installed will use the HandyCache cache. The default settings of this application are suitable for users in most cases.

The utility is equipped with flexible settings to control a variety of parameters. Can load files from cache depending on HandyCache file type or URL. And if necessary, it will download files from the Internet in case of a constant version update. Before that, the program will check their version and only then make a decision about accessing the download source.

The utility is convenient in that to search for any previously used data, you do not need to find them again. Just look in the cache for a folder with the same name as the site name. In addition, this Internet traffic control program for Android is ideal.

Clear and accurate accounting of money

As well as time and traffic can be exercised using the application StatistXP. The program for monitoring Internet traffic will allow you to comfortably and economically use the network. 10 launches are given for the trial period. And for further use, the utility is equipped with the option of prepayment and Internet cards.

The program implements:

• notification when connected and disconnected by voice;
• accounting of time, money and traffic with connection statistics by months and years;
• there is detailed information.

BitMeter II - software for monitoring Internet traffic

This utility is a traffic counter. In addition, it is equipped with a wide range of tools for collecting and monitoring network connections.

In the main window of the application in real time, you can see a graph of outgoing and incoming traffic. To quickly calculate the time spent on downloading, there is a special calculator.

The application supports the installation of warnings about exceeding the limits of the maximum traffic limit and Internet connection time.

Some features of the program:

• Customizable settings and alerts when the speed drops to a set level or when loading a certain amount data.
• Monitoring and recording of uploads and downloads. This will allow you to see how much traffic was used during a specific time period.
• Screen stopwatch.
• Good help file.
• Convenient customizable appearance.
• Ability to selectively monitor network cards.

This article will look at software solutions that will help control your traffic. Thanks to them, you can see a summary of the Internet connection consumption of a particular process and limit its priority. It is not necessary to view the recorded reports on a PC with special software installed in the OS - this can be done remotely. It will not be a problem to find out the cost of consumed resources and much more.

Software from SoftPerfect Research, which allows you to control the traffic consumed. The program provides additional settings that allow you to see information about consumed megabytes for a specific day or week, peak and off-peak hours. Provided an opportunity to see indicators of incoming and outgoing speed, received and sent data.

The tool will be especially useful in cases where limited 3G or LTE is used, and, accordingly, restrictions are required. If you have more than one account, statistics about each individual user will be displayed.

DU Meter

Application for tracking the consumption of resources from the World Wide Web. In the work area, you will see both the incoming and outgoing signal. By connecting the dumeter.net service account offered by the developer, you will be able to collect statistics on the use of the information flow from the Internet from all PCs. Flexible settings will help you filter the flow and send reports to your email.

Parameters allow you to specify restrictions when using a connection to the world wide web. In addition, you can specify the cost of the service package provided by your provider. There is a user manual in which you will find instructions for working with the existing functionality of the program.

Network Traffic Monitor

A utility that displays reports on network usage with a simple set of tools without the need for pre-installation. The main window displays statistics and a summary of the connection that has Internet access. The application is able to block the flow and limit it, allowing the user to specify their own values. In the settings, you can reset the recorded history. Available statistics can be written to a log file. An arsenal of necessary functionality will help fix the download and upload speed.

TrafficMonitor

The application is an excellent solution for countering information flow from the network. There are many indicators that show the amount of data consumed, return, speed, maximum and average values. Software settings allow you to determine the cost of the volume of information used at the present time.

In the generated reports there will be a list of actions related to the connection. The graph is displayed in a separate window, and the scale is displayed in real time, you will see it on top of all the programs in which you work. The solution is free and has a Russian-language interface.

NetLimiter

The program has modern design and powerful functionality. Its peculiarity is that it provides reports in which there is a summary of the traffic consumption of each process running on a PC. The statistics are perfectly sorted by different periods, and therefore it will be very easy to find the right period of time.

If NetLimiter is installed on another computer, then you can connect to it and control its firewall and other features. To automate processes within the application, rules are used that are compiled by the user himself. In the scheduler, you can create your own limits when using the services of a provider, as well as block access to the global and local networks.

DUTraffic

The features of this software is that it displays extended statistics. There is information about the connection from which the user entered the global space, sessions and their duration, as well as the duration of use, and much more. All reports are accompanied by information in the form of a diagram highlighting the duration of traffic consumption over time. In the settings you can customize almost any design element.

The graph that is displayed in a specific area is updated per second. Unfortunately, the utility is not supported by the developer, but it has a Russian interface and is distributed free of charge.

BWMeter

The program monitors the download / upload and speed of the existing connection. Using filters displays an alert if processes in the OS are consuming network resources. Different filters are used to solve a wide variety of tasks. The user will be able to fully customize the displayed graphs to their liking.

Among other things, the interface shows the duration of traffic consumption, the speed of receiving and uploading, as well as the minimum and maximum values. The utility can be configured to alert you when events such as downloaded megabytes and connection time occur. By entering the site address in the appropriate line, you can check its ping, and the result is recorded in the log file.

BitMeter II

A solution for providing a summary of the use of the provider's services. There is data in both tabular and graphical representations. In the settings, alerts are configured for events related to the connection speed and the consumed stream. For convenience, BitMeter II allows you to calculate how much time it will take to load the amount of data entered by it in megabytes.

The functionality allows you to determine how much available volume is left provided by the provider, and when the limit is reached, a message about this is displayed in the taskbar. Moreover, the download can be limited in the settings tab, as well as monitor statistics remotely in browser mode.

Represented software products will be indispensable in controlling the consumption of Internet resources. The functionality of the applications will help to compile detailed reports, and the reports sent by e-mail are available for viewing at any convenient time.