Mikrotik RB450 - what connections cause the most traffic

Hi all,

How do I distinguish on my Mikrotik RB450, what connections cause the most traffic?
Is it possible at all?

I saw big Tx value for one of interfaces in Webfig interfaces list. Could not see any active torrent or something like that on my local computer.
Yes, I know I can use Sub-menu /ip firewall connection, though it does not show what connection uses the most of traffic.
I just disabled that interface for few seconds and enabled it again, then mentioned Tx value became normal. I suppose even some internal mikrotik process running, but can’t prove it so far.
Any advise is appreciated.

You can use mangle and connection rate/bytes. See my signature.