vnStat is a network traffic monitor that uses the network interface statistics provided by the kernel as information source. This means that vnStat won't actually be sniffing any traffic and also ensures light use of system resources regardless of network traffic rate.

By default, traffic statistics are stored on a five minute level for the last 48 hours, on a hourly level for the last 4 days, on a daily level for the last 2 full months and on a yearly level forever. The data retention durations are fully user configurable. Total seen traffic and a top days listing is also provided.

See the official webpage or the GitHub repository for additional details and output examples. An example of the included image output is also available.

• vnStat daemon (vnstatd) is running as the primary process
• lighttpd provides vnStat image output (vnstati) via http (port 8685 by default)
• vnStat command line (vnstat)

• vergoh/vnstat:latest - latest released vnStat version
• vergoh/vnstat:dev - latest commit from GitHub repository

Version specific tags are available starting from 2.7 with the latest release being the same as latest tag. latest and dev are automatically built at least monthly to include possible install time updates.

Currently latest also includes updated versions of vnstat.cgi and vnstat-json.cgi for improved configurability.

docker build -t vergoh/vnstat .

docker run -d \
    --restart=unless-stopped \
    --network=host \
    -e HTTP_PORT=8685 \
    -v /etc/localtime:/etc/localtime:ro \
    -v /etc/timezone:/etc/timezone:ro \
    --name vnstat \
    vergoh/vnstat

• --network=host is necessary for accessing the network interfaces of the Docker host instead of being limited to monitoring the container specific interface
• --privileged may need to be used if the date within the container starts from 1970
  • The proper solution would be to update libseccomp2 to a more recent version than currently installed
• The http server port can be modified using the HTTP_PORT environment variable as shown in the example above
  • See the full list of available environment variables below
• Image output is available at http://localhost:8685/ (using default port)
• Json output is available at http://localhost:8685/json.cgi (using default port)
• Add -v some_local_directory:/var/lib/vnstat to map the database directory to the local filesystem if easier access/backups is needed

Command line interface can be accessed with:

docker exec vnstat vnstat --help

version: "3.7"
services:

  vnstat:
    image: vergoh/vnstat:latest
    container_name: vnstat
    restart: unless-stopped
    network_mode: "host"
    volumes:
      - /etc/localtime:/etc/localtime:ro
      - /etc/timezone:/etc/timezone:ro
      - vnstatdb:/var/lib/vnstat
    environment:
      - HTTP_PORT=8685
      - HTTP_LOG=/dev/stdout
      - LARGE_FONTS=0
      - CACHE_TIME=1
      - RATE_UNIT=1
      - PAGE_REFRESH=0

volumes:
  vnstatdb:

docker exec vnstat vnstat -i eno3 --setalias "Basement switch"

docker exec vnstat vnstat -i br-20f8582bfc70 --remove --force

1. Check that the interface is visible on the list of available interfaces:

   docker exec vnstat vnstat --iflist

2. Add the interface

   docker exec vnstat vnstat -i br-20f8582bfc70 --add

3. Notify the daemon

   docker exec vnstat killall -HUP vnstatd

• All images show no data available after the container has been started.

  • The database write interval is 5 minutes so it will take 5 minutes for the initial data to become available.

• Is the container running?

  docker ps

• What does the container log?

  docker logs vnstat

• Using a Synology NAS and timezone isn't correct?

  • Use /etc/TZ:/etc/localtime:ro instead of /etc/localtime:/etc/localtime:ro

• Container log shows Latest database update is in the future (db: 2037-04-03 18:16:49 > now: 1970-01-01 02:00:00) or something similar with now being in 1970.

  • Use --privileged or upgrade libseccomp2 to a much more recent version.