pls can u tell me what is this traffic attached
It’s packets addressed to TCP port 80.
You need to break further into the packet to determine the higher layer headers for further information.
Regards
Andrew
thanks andrew, but how i can break further to know this traffic,
also shouldn’t this be an unauthorized user and be unable to pull anytraffic since he didnt regester in the active hotspot users?
it is unauthorized
use Radius or see this
http://wiki.mikrotik.com/wiki/Firewall
How to Block Customer for example
sorry but i didn’t understand how redius could fix the problem. by the way traffic is only on the hotspot interface, he is not pulling anything from the internet, but i am not understanding what is it.any help pls