• 0

Monitor router traffic


Question

TheRealDave    5

For info of my connection check out:

http://www.neowin.net/forum/index.php?showtopic=551490

Basically WRT54GL with internet going through LAN port.

Anyways. My sister has the wireless connection, i am on the wired. How can I monitor traffic on the wireless connection? My mam is wanting to ensure my sister is doing homework and not messing about. Also she is wanting to not spy, but check up and make sure all her msn conversations are legit. We recently had a moment where my sister was asking us to buy drink on behalf on her and her friends which one of her friends had got her to do on further interigation. We would just like to keep one step ahead.

Things she wants to check is,

try and find out websites she visited

monitor msn chat logs

both with times and dates so we know she isnt staying on the computer too late.

I suggested putting a trojan on her pc but surely there must be easier methods as we have control over her doorway to the internet.

Thanks.

Link to post
Share on other sites

6 answers to this question

Recommended Posts

  • 0
Ben Davis    0
For info of my connection check out:

http://www.neowin.net/forum/index.php?showtopic=551490

Basically WRT54GL with internet going through LAN port.

Anyways. My sister has the wireless connection, i am on the wired. How can I monitor traffic on the wireless connection? My mam is wanting to ensure my sister is doing homework and not messing about. Also she is wanting to not spy, but check up and make sure all her msn conversations are legit. We recently had a moment where my sister was asking us to buy drink on behalf on her and her friends which one of her friends had got her to do on further interigation. We would just like to keep one step ahead.

Things she wants to check is,

try and find out websites she visited

monitor msn chat logs

both with times and dates so we know she isnt staying on the computer too late.

I suggested putting a trojan on her pc but surely there must be easier methods as we have control over her doorway to the internet.

Thanks.

Enable logging on the router for incoming traffic. That will give you the time and IP of the sites visited. Just check entries from port 80. May be an easier way to do it, DD-WRT perhaps has a good logging system.

Link to post
Share on other sites
  • 0
TheRealDave    5

I have DD-WRT. However (I believe) that since the internet is connected through the lan port and not the internet port (router acting like a gateway or whatever) I dont have access to the logs on the WRT. I can view logs on the modem but it just shows an outgoing LAN IP, Destination URL/IP, Service/Port Number. No good to me :(

Link to post
Share on other sites
  • 0
Ben Davis    0
I have DD-WRT. However (I believe) that since the internet is connected through the lan port and not the internet port (router acting like a gateway or whatever) I dont have access to the logs on the WRT. I can view logs on the modem but it just shows an outgoing LAN IP, Destination URL/IP, Service/Port Number. No good to me :(

The destination IP should be useful for checking what websites are being visited.

On the computer you want to check on MSN messages make sure message logging is enabled and just share the folder that the log files go into so you can get to them from another computer.

Link to post
Share on other sites
  • 0
+BudMan    3,748

TRD if you want your wrt54g to be your gateway.. Then turn your am200 into a bridge, ie just a modem -- I know we went over that option!!!

But your not going to be able to monitor chat logs.

edit: as to monitoring traffic on your dd-wrt, it supports both rflow an ntop

Edited by BudMan
Link to post
Share on other sites
  • 0
TheRealDave    5

whats rflow and ntop? How would I go about using them?

Link to post
Share on other sites
  • 0
+BudMan    3,748
whats rflow and ntop? How would I go about using them?
Reading the documentation would be a GOOD Place to start ;)

From Help on your dd-wrt router

RFlow / MACupd

RFlow Collector is a traffic monitoring and management tool that allows to watch a complete network of DD-WRT routers.

* RFlow Default port is 2055

* MACupd Default port is 2056

* Interval = 10 seems messages will be sent to server each 10 seconds

* Interface : choose which interface to monitor

Note

For each RFlow and MACupd server IP : enter the IP address of the listening server (win32 PC with RFlow Collector).

http://www.dd-wrt.com/dd-wrtv2/rflow.php

Here is an easy ntop setup

http://www.openxtra.co.uk/freestuff/ntop-xtra.php

Just point the rflow settings in the router to point to the machine running ntop.. Here this might be helpful

http://www.google.com/url?sa=t&ct=res&...8CU86ZPkVXeA9hQ

Configuring Ntop to work with the DD-WRT firmware for the Linksys.

If you really want to monitor where your clients are going, then you most likely want to setup a transparent proxy.. You can setup dd-wrt to send all traffic to the proxy.

http://www.dd-wrt.com/wiki/index.php/Transparent_Proxy

Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
  • Recently Browsing   0 members

    No registered users viewing this page.