 RevMortisI Hear Dead SiliconPremium
join:2005-05-10
Saint Paul, MN | [DD-WRT] Logging utilities The FAQ lists several utilities but has no gist of the strengths and weaknesses of same.
Need a way to pull the logs of all sites accessed through a WRT54G router running DD-WRT. Thinking one of these utilities could do it for free.
Any opinions on what's what? |
|
 dellsweigExtreme AerobaticsPremium,MVM
join:2003-12-10
Campbell Hall, NY
kudos:1
 ·Vonage
| said by RevMortis:The FAQ lists several utilities but has no gist of the strengths and weaknesses of same. Need a way to pull the logs of all sites accessed through a WRT54G router running DD-WRT. Thinking one of these utilities could do it for free. Any opinions on what's what? I believe what you are asking for is simple - you want to see a log of all incoming and outgoing requests (IP or URL) as well as port (i assume you want port).
The logging in your DD-WRT router does this already and has the ability to send it to a sepearate machine via "syslog". You can run a copy of Wallwatcher, KIWI or other free syslog programs.
I persoanlly like wallwatcher as it has some nice built-in reporting features - its not just a logger like KIWI.
Wallwatcher gives you some nice reports like Intrusion reports, distribution by IP, etc. |
|
RevMortisI Hear Dead SiliconPremium
join:2005-05-10
Saint Paul, MN | reply to RevMortis
OK. what about the other utilities? What is the opinion on them?
More info: A buddy of mine has teenagers. He'd like to keep track of when his kids are online, where they are going, and how often his kids revisit each site. The bonus would be to retrieve the routing logs externally. His network is configured such that ALL traffic must go through his DDWRT box.
My thought was that if the logs could be retrieved real time from an external node, the logs would be protected from "accidental" reboot.
I'm open to trying wallwatcher, but would like more opinions. |
|
 Link LoggerPremium,MVM
join:2001-03-29
Calgary, AB
kudos:3
 ·Shaw
| First a Disclaimer, I'm the author of Link Logger.
DD-WRT or any other firmware doesn't include any URL information in it's logging stream, so no logging tool is going to give you that information and about the closest your going to get is a reverse lookup for an IP address which may or may not tell you much.
Blake
--
Vendor: Author of Link Logger which is a traffic analysis and firewall logging tool |
|
dellsweigExtreme AerobaticsPremium,MVM
join:2003-12-10
Campbell Hall, NY
kudos:1 Reviews:
·Vonage
| reply to RevMortis
said by RevMortis:OK. what about the other utilities? What is the opinion on them? More info: A buddy of mine has teenagers. He'd like to keep track of when his kids are online, where they are going, and how often his kids revisit each site. The bonus would be to retrieve the routing logs externally. His network is configured such that ALL traffic must go through his DDWRT box. My thought was that if the logs could be retrieved real time from an external node, the logs would be protected from "accidental" reboot. I'm open to trying wallwatcher, but would like more opinions. I can esaily create an excel spreadsheet from my collected logs (all the logging programs allow you to export log data) and show times/source IP, destinationIP or URL and type of traffic (http, ftp, p2p, etc)
These logs receive the log data in real time FROM DD-WRT and store the data locally on a PC. Router reboot is not an issue.
If all you are looking for is to create your own reports (using excel for example) from log data any of the logging programs will work fine. I have used link logger, KIWI and wall watcher as well as syslog-ng for Linux and for my day to day home network use I like wallwatcher.
Try them all!! Make sure you assign a Static IP to the PC receiving the logs and configure that address as the syslog host in DD-WRT.
good luck
Dan |
|
| reply to RevMortis
actually, what you need is a proxy... Every thing gets recorded on a proxy box. On proxy boxes you can record all the IM conversations, as well as URLs, torrents downloaded, etc... |
|
