I have a reserved vpn setup between two environments. zRok said I received 5GB today (one day) and limited my account. I don't think I sent anywhere near that amount, but who knows?
Is there a way (Linux in general, or zRok specific) where I can get a breakdown of what that traffic was?
If you log into the web console, under your account, each environment you have, and under each share, there is a "metrics" tab, which shows 30 day, 7 day and 24 hour traffic graphs.
There is not currently a specific packet-by-packet auditing of traffic utilization, however.
The traffic metrics are delivered from the underlying OpenZiti network.
If you're using the VPN backend, you can probably run interface statistics against the tun0 (or other) tun interface you're using for the VPN. That might be able to give you some additional insight into what each side of the communication believes they've sent/received.