diff --git a/backend/src/services/wireguard-live.ts b/backend/src/services/wireguard-live.ts
index f0481f54..42d5b06c 100644
--- a/backend/src/services/wireguard-live.ts
+++ b/backend/src/services/wireguard-live.ts
@@ -1,3 +1,4 @@
+import { parseWireGuardBytes as parseBytes } from "./wireguard-observed-values.js"
import {boundedCompleteCount,completeCollectionCount} from "./complete-count.js"
import { eq } from "drizzle-orm"
import { db } from "../db/index.js"
@@ -53,12 +54,6 @@ interface RosIpAddress {
disabled?: string
}
-function parseBytes(v: string | undefined): number | undefined {
- if (v == null || v === "") return undefined
- const n = Number.parseInt(v, 10)
- return Number.isFinite(n) ? n : undefined
-}
-
function mapPeer(p: RosWireGuardPeer, idx: number): WgPeerDto {
const rosId = String(p[".id"] ?? `peer-${idx}`)
const allowed = (p["allowed-address"] ?? "")
diff --git a/backend/src/services/wireguard-observed-values.test.ts b/backend/src/services/wireguard-observed-values.test.ts
new file mode 100644
index 00000000..4d267c77
--- /dev/null
+++ b/backend/src/services/wireguard-observed-values.test.ts
@@ -0,0 +1,9 @@
+import { test } from "node:test"
+import assert from "node:assert/strict"
+import { parseWireGuardBytes } from "./wireguard-observed-values.js"
+test("WireGuard byte counters preserve zero and reject partial, negative or unsafe values", () => {
+ assert.equal(parseWireGuardBytes("0"), 0)
+ assert.equal(parseWireGuardBytes(" 1234 "), 1234)
+ assert.equal(parseWireGuardBytes("9007199254740991"), Number.MAX_SAFE_INTEGER)
+ for (const raw of [undefined, null, 0, {}, "", " ", "12junk", "1.5", "-1", "Infinity", "1e3", "9007199254740992"]) assert.equal(parseWireGuardBytes(raw), undefined)
+})
diff --git a/backend/src/services/wireguard-observed-values.ts b/backend/src/services/wireguard-observed-values.ts
new file mode 100644
index 00000000..795b5aba
--- /dev/null
+++ b/backend/src/services/wireguard-observed-values.ts
@@ -0,0 +1,6 @@
+// RouterOS byte counters are whole decimal values; absent or malformed values are unknown.
+export function parseWireGuardBytes(raw: unknown): number | undefined {
+ if (typeof raw !== "string" || !/^[0-9]+$/.test(raw.trim())) return undefined
+ const value = Number(raw.trim())
+ return Number.isSafeInteger(value) && value >= 0 ? value : undefined
+}
diff --git a/components/data-grids/wireguard-peers-detail.tsx b/components/data-grids/wireguard-peers-detail.tsx
index 81520862..b55dc691 100644
--- a/components/data-grids/wireguard-peers-detail.tsx
+++ b/components/data-grids/wireguard-peers-detail.tsx
@@ -12,7 +12,7 @@ import {
} from "lucide-react"
function fmtBytes(n: number | undefined): string {
- if (!n) return "—"
+ if (n === undefined || !Number.isFinite(n) || n < 0) return "—"
if (n >= 1_000_000_000) return `${(n / 1_000_000_000).toFixed(1)} ГБ`
if (n >= 1_000_000) return `${(n / 1_000_000).toFixed(1)} МБ`
if (n >= 1_000) return `${(n / 1_000).toFixed(0)} КБ`
@@ -80,12 +80,12 @@ function WireGuardPeersDetail({
{peer.latestHandshake ?? "нет рукопожатия"}
-
-
+
+
{fmtBytes(peer.transferRx)}
-
-
+
+
{fmtBytes(peer.transferTx)}
-
-
+
+
{fmtBytes(row.original.transferRx)}
-
-
+
+
{fmtBytes(row.original.transferTx)}