How to check IP with most bandwidth usage

RouterOS Scripting
1

Hello,
Is there any easy way to test which IP address has the most traffic? I know that i can watch it manually with torch. How can i do this this script. e.g check every 10s and find cumulative bandwidth from all connections to this IP address? Thanks in advance :slight_smile:

2

You can use IP accounting and sniffer. See this article. Keeps data month by month. works great.
http://forum.mikrotik.com/viewtopic.php?f=2&t=77193&p=480246&hilit=ip+accounting+sniffer#p480246

3

Thanks for answer, but i want something different. I try to write an attack ‘prevention’ script. So i monitor the interface traffic and if it pass a threshold i want with some way to find which IP doing this high traffic. How can i do this? Torch via api is reliable? Is there another ways?