Recently my home’s Internet usage jumped from a relatively constant ~600G/month to ~1.5T/month, equivalent of 8hrs of 4K streaming every day, from September bill to October bill. Xfinity’s claim agrees with my router’s usage counter, so the problem is not on the street; something in the house is using all that.
Sadly, Netgear Orbi RBR50v2 does NOT count by device usage. And, since Orbi is stiing behind the Xfinity cable modem, the cable modem is in the bridged mode, which disables any of the xFi functionality for such snooping, either via the xFi app or by their tech support. I could try to install Glasswire on all computers, but that will still leave out things like Smart TVs, tablets, phones, watches, connected A/V equipment, etc., right?
So, I was hoping to do the following. Please someone tell me if this would work or not.
Current setup: Xfinity xFi cable modem in bridge mode feeds into Netgear Orbi RBR50v2 router’s WAN input. The router’s LAN output goes out to a Netgear GS108Tv3 managed switch’s Port #1. Few outputs of that switch, with plenty ports left unused, feed a few devices close by, including a Windows10 PC with just one LAN card, as well as a Netgear 24-port unmanaged switch, which then spreads the wired network around the house through the walls & switches to different rooms and devices. Additionally, there are four Netgear Orbi RBS50v2 satellites for mesh networking; currently they are in wireless uplink mode, but can easily be plugged in to be wired uplink.
I was hoping that I could turn on port mirroring on that Netgear GS108Tv3 managed switch’s Port #1 to mirror all in & out traffic onto Port #2, then connect that port into the LAN input of the PC, which would effectively take that PC out of the home network, which I would remedy by using a USB/LAN dongle I already have and telling Windows to use that to connect to the home network. I am hoping that wired uplinks in all satellites would force wireless device traffic onto the wire, and mirroring all traffic (minus the Wifi traffic hitting the router directly, which I might avoid by turning off Wifi on the router and forcing devices to connect to the satellites) coming in & out of the router via the mirroring of Port #1, I would be able to have Glasswire on that PC watching the LAN card.
Is that even something Glasswire can do? Or, would I need to use something like Wireshark, which scares me given the hardcore UI. Is the hardware config described above even good for Wireshark? Or, PRTG? Am I even in the ballpark of a good approach of figuring out what is using up all those Gigs in the house?
Thanks for any advice!