General :: Internet Gateway Monitoring - Log Bandwidth And Site Access
Sep 27, 2010
In one of our network we are using one firewall which works as gateway. All machines are able to access internet through this gateway. There is no filtering and any internet restriction. I would like to setup monitoring system which monitor and log bandwidth and sites access by client machine. Is there any tool which monitor internet access as well as sites which are access from client machines.
Am working as net admin in an institute.. I have Leased Line connection with Public IP? I configured Red Hat Enterprise Linux 5 as Internet Server. I successfully Configured squid and as well as Internet Gateway in my Internet Server.. All are working fine in my client PC environment.. I have one Series Problem in my all Windows Client Pc.. When I try to surf Microsoft and Any Anti-virus site through squid(port no 3128) is fine?but when I try to surf the same Microsoft or any anti virus site through Linux Internet gateway then I got ?Page can not be displayed error?? but all other sites are surfed well through Gateway.. I felt some spy ware is attacked in my All windows Client PC.. So only it ll block Microsoft or any anti virus site through Linux Internet gateway(default port 80
We have a sipmle office network set up that we also use use to connect to the internet, however of late the number of users has increased thus slowing internet access. Bandwidth upgrade is not an option thus i have to do bandwidth shaping on our linux router. The question is how do set the squid configs to allow certain IP's range a certain percentage bandwidtheg 60% and furthe divide the rest. Alternatively how can allow certain IPs to have higher bandwidth access.
I have installed fedora 11 64 bit on a new computer. I have no problems accessing the computers on my local network, but can not get past the gateway. The gateway is running windows XP with IP address 192.168.0.1 and is named "internet". When I boot the new computer in windows, there is no problem. Here is the output of some commands I saw in other posts with similar problems:
I have 1 root-server with 2 NICs, both having their own internet IP addresses:
Code: eth0 = 8x.x.x.183 eth2 = 8x.x.x.205 We only have one gateway on that network: Code: gateway = 8x.x.x.1 We want to use eth2 for postfix + http, and eth0 for all the other stuff.
How can this be setup ? With route / ip route / iptables ?
How can I block access to a certain internet site using ufw? Let's say I want to block access to www.xxx.zzz (IP 1.2.3.4) to any program and user; using iptables I can do
sudo iptables -A OUTPUT -d 1.2.3.4 -j DROP how can I do that using ufw? if ufw can not do this, where should I put this rule to persist it over reboot, without interfering with ufw chains infrastructure?
Slow access to web site using squid and Internet explorer.I am trying to troubleshoot an issue I am stuck on. We have a website that is loading .htm documents extremely slow when using Internet Explorer 8 behind Squid. When we bypass the proxy and go directly out to the internet all is fast and pages load fine.But when the proxy is on documents will take sometimes up to 6 minutes to load.This issue is only apparent using Internet explorer 8.I do not see the issue when using firefox with Squid.I have tried to use the no_cache directive thinking it may have been the cache but that didn't work either.I am attaching our access.log, store.log and squid.conf.
My problem is the following : I have a certain Internet connection for a certain network. So many people are sharing this network. What i need is a software on Linux (preferably Ubuntu) that will enable me to monitor the bandwidth usage PER IP Like : ip x.x.x.x using 20Kb upload 200Kb download , connected to this site for example.. The main goal is to know from which IP is the high Upload traffic or download traffic is coming , because i have a certain quota and I'm always getting over the quota (in upload and download) and end up paying extra for the ISP , so i would need to know who is using lots of upload/download bandwidth .
I am renting a VPS from[URL].They do not supply a webhosting panel for restarting/shutting down or for seeing monthly bandwidth consumtion. I am running CentOS 5.3. I was wondering if theres any programs that you can install to view monthly/daily bandwidth consumption on our server?
Im looking for a program to monitor the ammount of bandwidth usage per network. Ex: I have lots of networks connected to one server, and i would like to know for example how much is the average bandwitdh usage for network 172.16.2.0/24 and 172.16.5.0/24 for one hour, for example.
I am connected with LAN. We have many computers with different OS viz.linux, windows etc. Now I want to know the bandwidth every computer is getting and using. Is there any Ubuntu packages to monitor this?
dear can someone highly gui or text base/command line tool that use as "isp bandwidth monitoring tools in linux".i do have leased line,frame relay, wireless linke,dsl too. i want to monitor what is uploading and downloading.
I am wanting a computer with an external dialup modem (ppp0 modem through a com port /dev/ttys1) to act as a gateway to the internet, forwarding internet traffic through ethernet (eth0 is set to static 192.168.2.2) to a router (the router is 192.168.2.1) where it will be broadcast to other wireless computers like my laptop (192.168.2.3). I've had this setup until recently when the gateway computer (the one with the modem) died. Now I'm replacing that machine with another box and an install of Ubuntu 10.10 but so far things aren't working for me.
Success so far:I have dialup access working on the new box. Took me a while to work out the configuration for getting dialup working, though the IP address is Dynamic (or it won't stay connected), "Check carrier line" is off, and "Ignore Terminal Strings (stupid mode)" is on in order to successfully connect and stay connected to my ISP. I also had to make my normal (non-root) user "lancer" a member of the "pid" group (the reboot) in order to use gnome-ppp as non-root. The laptop (192.168.2.3) is successfully connecting to the router (192.168.2.1) as I can see the router configuration page when I type http://192.168.2.1 into the laptop's web browser. This setup is unchanged from how I had it before when this was previously working and I don't want to change how the router itself is set up. What I want is to know what to fix in the new box in order to get it connected to the router (through ethernet) and bridging the internet through.
My problem is that whenever I plug in the eth0 from the gateway (192.168.2.2) to the router (192.168.2.1), Ubuntu's automatic plug-me-in network detection kicks in and I find my dialup no longer working through some kind of IP conflict (at least that's what I think it is). Maybe I don't have the "gateway" correctly assigned? (in the gateway computer for the ethernet connection, I had it pointing to itself as I don't know what to put for "gateway IP" as that is automatic So, just to check my connection, here I am pinging google (from the gateway computer which has the dialup modem) once a dialup connection has been made.
Code: lancer@lancer-desktop:~$ ping www.google.com PING www.l.google.com (74.125.237.17) 56(84) bytes of data. 64 bytes from 74.125.237.17: icmp_req=1 ttl=55 time=179 ms 64 bytes from 74.125.237.17: icmp_req=2 ttl=55 time=176 ms 64 bytes from 74.125.237.17: icmp_req=3 ttl=55 time=158 ms
[Code]...
What do I need to do in order to make Ubuntu of my gateway computer stay connected to my dialup but also simultaneously share an ethernet LAN to my wireless router and feed traffic to the other computers from there? I have googled this but some of the most promising instruction (e.g. http://www.ubuntugeek.com/sharing-in...in-ubuntu.html) call for packages like dnsmasq or ipmasq which seem defunct now in Ubuntu 10.10. Other pages seem to suggest dual-networks "can't be done" in Ubuntu [URL].. (what!?! I had it before my other gateway died)
I'm using CONKY on Ubuntu 9.10, and trying to display network usage statistics for my 3G internet. I want to display something like the following:
Code:
Today--------------------- UP : xxxMb DOWN : xxxMb Past Week:---------------- UP : xxxMb DOWN : xxxMb Past Month:--------------- UP : xxxMb DOWN : xxxMb
I switched on bandwidth monitoring on my Ubuntu Server via Webmin on interface eth1. Unfortunately this has filled my disk by writing huge syslog, debug and kernel.log files. How do I switch it off? I can't see a way of doing it in Webmin.
Since this is my number 1 place for asking questions, I figured I would go here first. So I live in New Zealand where good internet doesn't exist yet, and I'm in a flat with 3 other people and we get 40gb a month which hasn't been lasting more than 2 weeks. It is somewhat of a mystery where all our data has gone, so I need a way to monitor usage. We use a variety of operating systems including linux, xp & windows 7 on my pc, and xbox 360. Is there any kind of integrated solution I can use to monitor everything with password protection so it can't be disabled? I have tried looking in the router, but it doesn't give me many statistics, and I think it combines lan with wan usage. At this stage I don't have the money to make a linux box to put between the router and the switch that can monitor everything, but if it comes to it, I will shell out for one.
I have a server rack that I lease out to others. I need a way to monitor each persons bandwidth usage. How can I do this without installing software on their machines or disrupting traffic flow? I have no access to the router, as it is owned by the colo company. I do have access to the switch and firewall, as well as my machines (linux) on the rack.
I have recently purchased dedicated box for game servers, I just wanted to install bandwidth monitoring software, however I have read comments regarding it as it uses lot of CPU resources. There is another method to monitor bandwidth using iptables. But that article is too complex for me: [URL]. I just want to check my overall bandwidth not from any particular ports. Any teaching commands to do that, as my new to Fedora. I use ssh to control my server.
I have a Linux host connected via LAN to Internet. No proxy or squid is used on the host and outgoing traffic to Internet is not limited. I have several local users on this box. Recently bandwidth statistics on the switch/router showed increase in the Internet traffic from this host. How do I monitor the traffic utilization per local user on Linux host? I want to be able to monitor the amount of traffic per port and per user, like user alice downloaded 20GB today via port 22, and so on. Do not offer to use Squid, this is not just web traffic I want to monirot but all amount of incoming/outgoing traffic per user per port.
I just wanted to use a network bandwidth usage monitoring application. Scenario: I am using an EV-DO based USB broadband modem with a limited GB plan. For additional data usage they charge per MB. Currently I use either wvdial (mostly) or pon to start the connection. So if there is any network monitoring application which could log time used and data used for the session, it would be great. Actually debian has too many different network monitoring applications, But I am not sure which one suits well for this purpose.
Back in school I remember using an application that would identify active IP addresses on a network, and basically show you a log of activity. We actually monitored another lab and went in and showed them what we saw (all the machines had IP addresses on the monitors.) We could see websites, bandwidth, etc.
I'm trying to find an application that would do this again. I've been trying to monitor my networks to see what machines are performing unauthorized operations. ISP is showing high bandwidth usage and there is no way checking email and browsing is using this amount, 200GB a month! Something is going on here.
I've got an apache server running several virtual hosts. I have them separated by domain name, and they all come into the same IP address. I'm looking for a way to monitor the bandwidth that they use. The only feature that I'm really looking for is a breakdown of which domain is dishing out how much bandwidth.
blocks.com got three visitors this month. And spent 200kb in serving them. emus.net got fifteen. And spent 1mb in serving them. reverse.org got 4000. and spent 400mb in serving them.What I would like to see is a report, could be a web page could be a file. Ideally with graphs. Showing: 1. 2..... 3[400mb worth of dots]
1-blocks.com 2-emus.net 3-reverse.org
I don't need it to show me how many visitors or from where or anything like that. I am just looking for a side by side comparison of how much bandwidth each domain is using.Is there some application for this or something. Everything that I've found has been for information on a single site (awstat and friends can show me information for multiple sites, but as far as I know it won't show me information comparing them) I haven't found anything for nagios, but perhaps there is something out there for it, or a sneaky way to make a nice plugin that would do this.
I want a bandwidth monitor which performs constant monitoring of the ethernet. I want to see how much bandwidth I am spending by opening each website, downloading, etc. A small program which can remain "always on top".
I am using Gkrellm but the problem is it does not updates itself constantly, I mean I have to close/open its eth0 monitoring window to view changes (I am not talking about restarting Gkrellm, only the bandwidth window which shows the daily, monthly bandwidths)
I have a third party program (tightvnc) which I want to monitor and detect if it loses a connection with a client. I don't care if the client has the program open but isn't doing anything with it, I only want to know if the actual TCP connection is lost.
Since TCP takes forever to die on it's own I was thinking the best way to detect if a connection is lost is by bandwidth the bandwidth on the tcp port allocated to the VNC connection. Are there any tools built in to redhat (RHEL 5.2) which I could use to do this? Since I don't have full control of the operating system I would prefer to use built in tools rather then trying to get a new tool installed.
There are a lot of boxes in this network and we have intranet site. If I connect computer directly to the network with everything set to automatic. I can see this intranet site. But I've installed a switch. One box has two net adapters and it takes internet, intranet and all from one adapter, the other adapter is connected to switch. Now, I have connected to this switch two computers. Internet is working fine. But I cannot get to this intranet site from these boxes. I can get into shares of other computers in the network but they cannot see me. Everything is hidden behind the gateway. But that's not the problem for me. All I want is to get to this intranet website. How can I do it?.
I used the Ubuntu server 10.10 for cache and proxy purpose. I install squid 2.7 stable 9. My problem is to cache the some url by force. eg . [URL]...I search the clues by using google. but I only found how to block the url. so I come here and request the advice. I want to cache the couple of site because of our country have bandwidth problem.
I'm trying to find a good host for my site, and I've been trying to get one with a fast, reliable connection - I frequently use it as a proxy server for various areas, and since my connection is frequently a 50 Mb or 100 Mb line, I need a fast network connection so it doesn't slow down too much when I switch to the proxy server.
At the moment, I've narrowed it down to a couple of providers that are all within a few hops and <6ms away from my main location; it pretty much comes down to connection speed. One in particular that I'm trialing offers an metered 100100 connection at a good price, so I'm hoping to go with them, but I want to make sure the connection is solid and doesn't drop to a much lower speed during the day if they are sharing it among many users.
I have a pretty simple speed test procedure - I use wget on a 1GB file hosted on a backbone with a 1GB connection, and see how fast it downloads. For now, it's sticking at a steady 11.2 MBs or 90 Mbs, which is fast enough for me, but I need to make sure it can maintain that speed even in times of heavy usage.
[/BACKSTORY]
Basically, I need a script that runs wget every half hour and logs the output and time in a reasonably readable format. It's probably something simple enough to do, but I'm just learning my way around the linux command shell, so some simple instructions on how to create and run such a script would be great [CentOS 5]. I have full root access to the server and I'm the only user on it if it matters.