How to collect traffic information on router???

Maybe · n00b Joined: 12 Apr 2004 Posts: 13

I have a router/firewall.
I need to know traffic of every user on every day!
Which tools allowes it?

DrACoNuS · Posted: Mon Apr 12, 2004 6:35 pm Post subject:

Does your router support snmp? That would be usefull for logging traffic per IP address, as far as logging traffic per user you will have to use a proxy. And that can get extremely complicated if you want to use it for more than just FTP/HTTP statistics.
_________________
Is that a huge bandwidth or are you just happy to see me?

Maybe · n00b Joined: 12 Apr 2004 Posts: 13

I need router which can count traffic for every user of network.
Like Traffic Inspector on windows

DrACoNuS · Posted: Mon Apr 12, 2004 9:05 pm Post subject:

Protocols don't operate on a user by user basis so this won't be possible, however like I said, this is all possible with a proxy.
_________________
Is that a huge bandwidth or are you just happy to see me?

smart · Guru Joined: 19 Nov 2002 Posts: 455

There are several tools out there for traffic measurement, but the by user basis gives me concerns, too.
Sounds like proxy on one hand.... on the other, are all your users on Linux ?

Immortal Q · Posted: Wed Apr 14, 2004 6:30 pm Post subject:

Could you give us more information about what you're trying to put together? Maybe what type of firewall/router box you're using?
_________________
Osmos.org
Now with 20% fewer rabid primates.

rmalolepszy · Apprentice Joined: 01 Jan 2004 Posts: 167

This may be a little stressful on a router, but if you have a Cisco 3600 or higher, you can use it's logging facilities to log every flow.
_________________
Cheers,
Ryan

CoderGnome · n00b Joined: 02 Jan 2004 Posts: 9

One way of doing this (prehaps not ideal) might be to compile a digest of your iptables statistics on your router, and run that through a crontab to email it to you on a regular basis. It would be a pretty simple script to write, actually.

As for the user-basis thing, I'm not sure either. You could easily monitor traffic on a per-computer basis, however.