[ILUG] Problems with Three Mobile-Broadband Router

[Ian Spillane]

Folks,

I have a puzzle. I would welcome any insights.

I have a Three USB Broadband dongle. Recently bought a compatible
wireless router from Three.

My 15GB allowance is draining very very fast. I have been charged
megabucks for over quota MBs. I cannot explain it.

At present I have two machines running (sometimes three). To monitor
web usage I have set up a squid proxy server. Both machines have proxy
settings set in the environment variables.

Squid reports a reasonable amount of Internet traffic - about 200Mb in
the last 24 hours - and it is all reasonable in the Sarg reports. This
is backed up by vnstat reports on eth0 traffic to the router (even
though this would also include local traffic and tend to be a lot
higher).

However both the router's own ppp.log and Three.ie online usage
monitor have recorded over 950Mb of usage (about 500Mb during the
night when I wasn't using any machine).

No major distro updates are happening. I live in a completely isolated
rural area where you have to be in my farm yard to get my wifi signal.

I would welcome suggestions on how to prove what is going on.

Is there a bullet-proof way to audit all Internet traffic out of a network?

Ian