SELECT dst, SUM (sent) AS sent, SUM (rcvd) AS rcvd 
FROM traffic WHERE datetime >= (SELECT now()::date) and src like '192.168.33.1' and dport=53 
GROUP BY dst ORDER BY rcvd DESC;

SELECT dst, SUM (sent) AS sent, SUM (rcvd) AS rcvd 
FROM traffic WHERE datetime >= (SELECT now()::date) and src like '192.168.33.1' and dport=1025 
GROUP BY dst ORDER BY rcvd DESC;

SELECT dst, SUM (sent) AS sent, SUM (rcvd) AS rcvd 
FROM traffic WHERE datetime >= '2017-03-17' and src like '192.168.33.1' and dport=1025 
GROUP BY dst ORDER BY rcvd DESC;

traflogdb=> \d traffic
                                     Таблица "public.traffic"
 Колонка  |             Тип             |                       Модификаторы
----------+-----------------------------+----------------------------------------------------------
 lineid   | bigint                      | NOT NULL DEFAULT nextval('traffic_lineid_seq'::regclass)
 datetime | timestamp without time zone | NOT NULL
 namedev  | character varying(10)       | NOT NULL
 src      | character varying(16)       | NOT NULL
 sport    | integer                     |
 dst      | character varying(16)       | NOT NULL
 dport    | integer                     |
 message  | character varying(20)       |
 duration | integer                     | NOT NULL
 sent     | integer                     |
 rcvd     | integer                     |
 protoid  | smallint                    | NOT NULL
 proto    | character varying(16)       |
 mac      | character varying(18)       |
Индексы:
    "traffic_pkey" PRIMARY KEY, btree (lineid)
    "traffic_index_datetime" btree (datetime)
    "traffic_index_dport" btree (dport)
    "traffic_index_dst" btree (dst)
    "traffic_index_src" btree (src)

traflogdb=> select pg_table_size('traffic');
 pg_table_size
---------------
    8274214912
(1 строка)

traflogdb=> EXPLAIN SELECT dst, SUM (sent) AS sent, SUM (rcvd) AS rcvd FROM traffic WHERE datetime >= (SELECT now()::date) and src like '192.168.33.1' and dport=53 GROUP BY dst ORDER BY rcvd DESC;
                                                 QUERY PLAN
-------------------------------------------------------------------------------------------------------------
 Sort  (cost=986404.28..986404.30 rows=5 width=20)
   Sort Key: (sum(rcvd))
   InitPlan 1 (returns $0)
     ->  Result  (cost=0.00..0.01 rows=1 width=0)
   ->  HashAggregate  (cost=986404.16..986404.21 rows=5 width=20)
         Group Key: dst
         ->  Index Scan using traffic_index_datetime on traffic  (cost=0.56..985517.22 rows=118258 width=20)
               Index Cond: (datetime >= $0)
               Filter: (((src)::text ~~ '192.168.33.1'::text) AND (dport = 53))
(9 строк)

traflogdb=> EXPLAIN SELECT dst, SUM (sent) AS sent, SUM (rcvd) AS rcvd FROM traffic WHERE datetime >= (SELECT now()::date) and src like '192.168.33.1' and dport=1025 GROUP BY dst ORDER BY rcvd DESC;
                                                  QUERY PLAN
--------------------------------------------------------------------------------------------------------------
 Sort  (cost=189281.92..189281.92 rows=1 width=20)
   Sort Key: (sum(rcvd))
   InitPlan 1 (returns $0)
     ->  Result  (cost=0.00..0.01 rows=1 width=0)
   ->  HashAggregate  (cost=189281.88..189281.89 rows=1 width=20)
         Group Key: dst
         ->  Bitmap Heap Scan on traffic  (cost=63864.90..189189.38 rows=12334 width=20)
               Recheck Cond: (dport = 1025)
               Filter: ((datetime >= $0) AND ((src)::text ~~ '192.168.33.1'::text))
               ->  BitmapAnd  (cost=63864.90..63864.90 rows=37003 width=0)
                     ->  Bitmap Index Scan on traffic_index_src  (cost=0.00..27561.36 rows=1146773 width=0)
                           Index Cond: ((src)::text = '192.168.33.1'::text)
                     ->  Bitmap Index Scan on traffic_index_dport  (cost=0.00..36297.12 rows=1865674 width=0)
                           Index Cond: (dport = 1025)
(14 строк)

traflogdb-> GROUP BY dst ORDER BY rcvd DESC;
                                              QUERY PLAN
-------------------------------------------------------------------------------------------------------
 Sort  (cost=1772.79..1772.79 rows=1 width=20)
   Sort Key: (sum(rcvd))
   ->  HashAggregate  (cost=1772.77..1772.78 rows=1 width=20)
         Group Key: dst
         ->  Index Scan using traffic_index_datetime on traffic  (cost=0.56..1772.60 rows=22 width=20)
               Index Cond: (datetime >= '2017-03-17 00:00:00'::timestamp without time zone)
               Filter: (((src)::text ~~ '192.168.33.1'::text) AND (dport = 1025))
(7 строк)

SELECT src, SUM (sent) AS sent, SUM (rcvd) AS rcvd 
FROM traffic
WHERE datetime >= now()::date and src like '192.168.%' 
GROUP BY src ORDER BY rcvd DESC

SELECT
dport, SUM (sent) AS sent, SUM (rcvd) AS rcvd
FROM traffic
WHERE datetime >= now()::date and src like '$form{src}'
GROUP BY dport ORDER BY rcvd DESC

SELECT
dst, SUM (sent) AS sent, SUM (rcvd) AS rcvd
FROM traffic
WHERE datetime >= now()::date and src like '$form{src}' and dport='$form{dport}'
GROUP BY dst ORDER BY rcvd DESC

ALTER TABLE traffic_test ALTER COLUMN src TYPE inet USING src::inet ;
ALTER TABLE traffic_test ALTER COLUMN dst TYPE inet USING dst::inet ;
ALTER TABLE traffic_test ALTER COLUMN mac TYPE macaddr USING mac::macaddr ;