.
====== Network Usage ======

The **Network** page under **Usage Information** shows server-wide network traffic statistics. It replaces the previous Analog-based network reports and uses nftables accounting instead.

===== Location =====

**Navigation:** Server Management → Usage Information → Network

**Direct URL:** <code>/sitestats/summaryNetwork</code>

===== Tabs =====

The page is divided into two tabs:

==== Live (since last hourly reset) ====

This tab displays real-time and snapshot data:

**Real-time RX/TX Rates**
  * A live updating chart showing current network throughput
  * Same data source as the Network Usage widget on the dashboard (swupdate/news)
  * Fetched via <code>/gui/metrics</code> endpoint (CCEd-API /v2/metrics, key <code>aggnet</code>)

**Per-IP Snapshot (Pie Chart + Table)**
  * Shows inbound vs. outbound traffic share since the last hourly reset
  * Data source: <code>nft list table inet bxacct</code> (parsed by <code>/usr/sausalito/sbin/bxacct_dump.sh</code>)
  * Table columns: IP address, Inbound, Outbound, Total
  * Sorted by total traffic (descending)

**Notes:**
  * Loopback addresses (127.0.0.0/8) are **omitted** from all displays
  * If no data is shown, wait for <code>log_traffic</code> to run once (hourly cron job)

==== Last 24 hours ====

This tab shows historical hourly data:

**Bar Graph**
  * Inbound and outbound traffic per hour for the last 24 hours
  * Y-axis unit: MiB
  * Data source: <code>/var/log/ipacct</code>
  * This tab is hidden until ipacct contains at least one hour of data

===== Data Sources =====

^ Layer ^ Source ^ Description ^
| Real-time rates | <code>/gui/metrics</code> (aggnet) | Live RX/TX deltas from the system |
| Snapshot per IP | nftables <code>inet bxacct</code> | Counters since last hourly reset |
| 24h history | <code>/var/log/ipacct</code> | Hourly log written by <code>log_traffic</code> |

===== Technical Background =====

**Version:** Available since base-sitestats **2.4-14** and later.

**Backend Changes:**
  * Replaces the old iptables-based accounting
  * Uses nftables table <code>inet bxacct</code> with chains <code>acctin</code> and <code>acctout</code>
  * The <code>log_traffic</code> script resets counters hourly and writes to <code>/var/log/ipacct</code>
  * No Analog or Webalizer is involved

**Permissions:**
  * Requires <code>adminUser</code> or <code>serverStatsServerNetwork</code> capability

===== See Also =====

  * [[userguide:sitestats:summary|Usage Information Overview]]
  * [[userguide:sitestats:summaryMonitorix|Monitorix]]
  * [[userguide:sitestats:summaryEmail|Email Statistics]]