I have a 50gb capped fast connection. Usually no problem but this month traffic doubled but don't know why. Have installed wireshark and need to apply filter and get stats which say where traffic is from in total to try and find problem. Gateway is Fritzbox at 192.168.178.1 but each effort at specifying a gateway in the filter results in an error (and I have read the manual!) Have run test captures with host as the gateway address and looked at each report but am not much the wiser. (I used to own an ISP but problems like this I passed to my techies ):
