RadiusNest › Guides

MikroTik: see who is using the bandwidth

Last updated: 2 October 2026

When the line is slow, the first question is who is using it. MikroTik has several built-in tools that answer it in seconds.

Torch: live traffic per address

/tool torch interface=bridge src-address=0.0.0.0/0

In Winbox: Tools → Torch, choose the LAN interface, tick Src. Address and sort by Rx Rate. The top line is the heaviest device right now.

Hotspot and PPPoE sessions

/ip hotspot active print
/ppp active print
/ip hotspot user print stats

Queue statistics

/queue simple print stats

How full is the line

/interface monitor-traffic ether1 once

What a device is talking to

/ip firewall connection print where src-address~"192.168.88.10"

Graphs over time

/tool graphing interface add interface=ether1
/tool graphing queue add

Open http://ROUTER-IP/graphs/ from the LAN to see daily and weekly graphs.

What you usually find

  • One device at full speed for hours: a game or system update, cloud photo backup, or video in high quality.
  • Many connections to many addresses: file-sharing software.
  • High upload from one device: a camera recorder sending video out, or a computer that is infected.
  • Traffic at night when nobody is there: automatic updates and backups. A speed limit or a schedule tames them.
  • The line is full but no single device stands out: simply more users than the line can carry. Share it fairly with PCQ, or add a second line with load balancing.

Per customer on hotspot and PPPoE

For logged-in customers, sort the active list by rate to see who is heaviest right now, and read each user's total with print stats. The counters reset when the user is removed or the router restarts.

Then what

Give the heavy device a limit (bandwidth limit per user) or share the line fairly with PCQ.

Where RadiusNest fits

Torch shows this minute. RadiusNest keeps the history per customer: data used in the current package, each session with its start, end and device, and who is online now on every router, in one list.

Start the free trial See pricing

Questions and answers

Why does Torch show nothing?

You picked an interface the traffic does not pass through. Choose the LAN bridge or the customer interface.

Can I see usage per day per user on the router?

Not as a report. The router shows live figures and counters; history per user needs accounting through RADIUS.

Does Torch slow the router down?

It uses some processor while open. Close it when you have your answer.

Related guides

Start the free trial See pricing