Networking :: User Web Activity Monitoring?
Apr 27, 2010
I have a Centos router and I want a tool that can give me reports accessible from a browser about the users web activity. I need two type of daily reports:- list of web pages accessed by each local host- list of all web pages accessed by all local hosts and lit of local hosts that accessed one specific web pageI tried ntop and is not really suitable for what I need. Maybe it can do what I need, but I have to make several improvisations.
View 5 Replies
ADVERTISEMENT
Feb 8, 2010
System activity monitoring tools - top, iotop, ntop, sar, collectl, etc - may be a good reference to judge the system activity when the system transitions to sleep state.But if I make the system transition to sleep state when i/o activity is zero during 15 minutes, for example, it won't sleep forever because slight i/o by daemons, etc occurs continuously even if no user i/o.So how can I judge the system activity to change the state by using those tools?
View 4 Replies
View Related
Mar 17, 2010
I have a Linux host connected via LAN to Internet. No proxy or squid is used on the host and outgoing traffic to Internet is not limited. I have several local users on this box. Recently bandwidth statistics on the switch/router showed increase in the Internet traffic from this host. How do I monitor the traffic utilization per local user on Linux host? I want to be able to monitor the amount of traffic per port and per user, like user alice downloaded 20GB today via port 22, and so on. Do not offer to use Squid, this is not just web traffic I want to monirot but all amount of incoming/outgoing traffic per user per port.
View 3 Replies
View Related
Apr 20, 2010
I can start/stop it with origami, but I need to know how to run the start/stop commands when the user becomes idle or active.Or, if I can tell if any user logged in with KDM (since I don't want ssh to stop f@h) is active from a script, I can write one that will do all I need.I can edit sudoers if the commands have to be run as the user. There's only one user I'm worried about making happy (it's the one everyone in the family shares)
View 3 Replies
View Related
Feb 22, 2010
I am working on a program lets say programX which must run when the computer is not in use. I want to develop a monitoring program to monitor if there is user activity on the system so that it can stop the programX from running when the user is using the system and start programX when there is no user activity. Is there a way to determine this in linux?
View 4 Replies
View Related
Jan 2, 2010
I wonder if there is any chance to read the last time when the actually logged user have changed the mouse cursor and stroke the key.
View 3 Replies
View Related
Apr 27, 2011
Is there any way to view the any user activity/ commands history and date, time in the system? I look at the /var/log/secure but I can find only the login/ logout attempts and "history" command doesn't come with date/time that the user issue the commands. Any there any best practice to audit the user activities inside the system?
View 9 Replies
View Related
Sep 18, 2010
I need to produce a script that will create a report that will be emailed to me that will Log user login activity to detect unauthorized remote access attempts. Where would I start?
View 2 Replies
View Related
Nov 14, 2010
A client has a desktop program that uploads images and data to a certain folder where i have a script that imports it to a DB, this all works. But i cant just set it to a hourly cron or have the client run a script after they have uploaded via FTP (the client is not techy).
So I need a way to detect when they have finished uploading all the data via ftp, which i just cant see a way of doing....it would have to be a linux command where it notifies a php script when the client has logged out of ftp, then disables shell access temporarily imports the data they have uploaded then reactivates shell access...but i have no idea what linux commands i would have to look into to get this working.
View 5 Replies
View Related
Feb 3, 2011
I am in the process of setting up a user account for an SFTP server that will possibly be used by multiple users. I am aware of the security risk involved, but it is a necessary evil.
I am trying to come up with an effective means of monitoring the user account. So far I have a script that runs the finger command, and emails me once an hour. Is there something else that I can do to keep a close eye on the account?
View 4 Replies
View Related
Jan 27, 2011
We are looking to monitor and log selected application file systems for file create/modify/delete changes that will also include, user account that changed/deleted the file, file name and date and time of event. Everything I have looked at does not seem to provide all of the information that we need.Inotify seems to monitor modify/create/delete but does not seem to provide the user account. Auditd seems to monitor modify/create/append with user account, but not deletes.We need to provide this information to auditing for Sarbane Oxley compliance.
View 3 Replies
View Related
Dec 27, 2010
I need to have the ability as network administrator to see what everyone connected to our internet is doing, the sites their visiting and emails being sent.
View 6 Replies
View Related
May 28, 2011
I am trying to figure out how to set ALL of my network activity to go through tor. I have set my network proxy configurations to tor and polipo settings (127.0.0.1:8118 for http and 127.0.0.1:9050 for socks) works great in firefox, but if I nmap scan my router, it says that the incoming signal came from my other ip.. yes I have 2 internet connections, no I am not a hacker. so, I am wondering what I am missiing here, it has to be something simple, just a line I need to add to a config file or something.
View 1 Replies
View Related
Jan 24, 2011
The only window that's open is the terminal running this command, no pidgin, skype, samba, torrent or anything I can think of is using the network yet there is ***** load of output from tcpdump. I was hoping to use this to check where certain applications connect to and what messages they send but when I'm doing nothing there is already more output than I can go through. Running tcpdump for less than 10 seconds gives me the following output:
Code:
16:13:22.015683 IP ns.hihkptt.net.cn.domain > desk.local.56598: 46887 1/2/2 (166)
16:13:22.016251 IP ns.hihkptt.net.cn.domain > desk.local.60099: 21168 1/2/2 (166)
16:13:22.016743 IP ns.hihkptt.net.cn.domain > desk.local.42325: 50346 1/2/2 (166)
16:13:22.034733 IP ns.hihkptt.net.cn.domain > desk.local.41441: 63658 1/2/0 (134)
16:13:22.035215 IP ns.hihkptt.net.cn.domain > desk.local.42865: 37537 1/2/0 (134)
16:13:22.036124 IP ns.hihkptt.net.cn.domain > desk.local.35006: 7520 1/2/0 (134)
16:13:22.036569 IP ns.hihkptt.net.cn.domain > desk.local.38480: 51322 1/2/0 (134)
16:13:22.066006 ARP, Reply 192.168.0.1 is-at 00:b0:0c:02:60:9c (oui Unknown), length 46 .....
View 2 Replies
View Related
Jul 1, 2011
I had a problem with the new network manager a week ago and got it solved with help from the forum so now I'm back again. I have a dual boot with Windows 7 (I have to use it when serving my corporate masters) so I wasn't in my Fedora partition much this week.
I just noticed this and I'm positive it wasn't doing it before my network manager problem but I'm not sure when it started or if they're related.
I'm running F15. The machine is an HP Elitebook 8440p and has a wifi light that is also a touch button to turn the wireless on/off. Whenever there is activity on the network now it blinks between orange and blue. I know that isn't really a big deal but it's really annoying and is driving me completely nuts!! The normal behavior is orange when it's off, solid blue when it's on (or connected) and blinks orange/blue just while it's connecting. During network activity it's always been just solid blue and that's what I want.
I found a script that some Ubuntu users said fixed the same problem but when I tried to copy it the directory they said to put it in "/etc/network/ifup.d" doesn't exist. I'm assuming that's a distro difference between Ubuntu and Fedora?
Has anyone else seen this? Any ideas how to fix it?
View 3 Replies
View Related
Mar 12, 2010
I have a Dell PowerEdge 1950 with Centos 5.4 installed. I am having an issue where there is no network activity on any of the NIC's.(Broadcom and Intel).
I have read that this might be somewhat common but have not found any solutions. I am unable to ping anything internal or external. Has anyone encountered this problem and have a potential fix?
View 1 Replies
View Related
Jul 13, 2009
I upgraded from Fedora 10 to Fedora 11 last night in response to a pop up window. When I rebooted after the upgrade my wife immediately complained about the internet not working. Actually the connection up was working but Fedora 11 upgrade had made it slow almost to a stop There are two XP machines the network behind a local D-Link wireless router with Comcast high speed internet. When I disable networking on the Fedora machine the internet connection immediately returns to normal on the other two machines. Also there is a second or two period after enabling networking for a quick upload or download before the connection clogs.I checked the system monitor network history and found that there is a constant networking send rate of just under 180 kb/s in the background.This occurs even when the browser, email client, and automatic backup are off and the only process showing significant CPU use in the system monitor is the monitor itself.
I tried netstat but there were so many /tmp/orbit entries that I could not scroll up to the top of the listing. Is this normal. If so, does anyone know the netstat command options to just see connections with sent packets. I also tried ifconfig -a. This shows no Rx packets at all, and no TX packets except on eth0, The total etho TX packets matches t,he reported by the system monitor, and in the monitor you can watch the total accumulate in approx 180 kb/sec increments. I don't understand why 180kb/sec TX would make a dramatic difference in internet network internet speed. Comcast reports upload speeds in megabytes. I need to be able to use the net in Federa, but I am also curious to learn what is the caused the problem.
View 2 Replies
View Related
Oct 5, 2009
I am renting a VPS from[URL].They do not supply a webhosting panel for restarting/shutting down or for seeing monthly bandwidth consumtion. I am running CentOS 5.3. I was wondering if theres any programs that you can install to view monthly/daily bandwidth consumption on our server?
View 2 Replies
View Related
Dec 18, 2009
Im looking for a program to monitor the ammount of bandwidth usage per network. Ex: I have lots of networks connected to one server, and i would like to know for example how much is the average bandwitdh usage for network 172.16.2.0/24 and 172.16.5.0/24 for one hour, for example.
View 1 Replies
View Related
May 1, 2010
I am connected with LAN. We have many computers with different OS viz.linux, windows etc. Now I want to know the bandwidth every computer is getting and using. Is there any Ubuntu packages to monitor this?
View 1 Replies
View Related
May 6, 2010
I have a small office network with windows machines and a Linux Internet access server (CentOS 5.4). For Internet access I use masquerade, so everione can access every Internet service.
I periodicali have quite big traffic from one of the hosts, but I can't figure out which one is that?
Is there any linux command which will show me the bytes/packets (or any useful infos) going to specific hosts?
View 9 Replies
View Related
May 11, 2010
dear can someone highly gui or text base/command line tool that use as "isp bandwidth monitoring tools in linux".i do have leased line,frame relay, wireless linke,dsl too. i want to monitor what is uploading and downloading.
View 11 Replies
View Related
Jun 23, 2010
I am simulating a TCP/FTP to TCP/FTP network and trying to monitor the packet loss.
I am able to monitor and graph data regarding the TCPSinks' bytes received, but I can't monitor packet loss.
Why is it that the TCPSink Agent has a variable for bytes (bytes_) but not one for monitoring packet loss?
Do I have to monitor the packet loss from the queue? If so, how do I write code for this?
Below is part of the code for monitoring bytes received from sinks if anyone was interested.
View 4 Replies
View Related
Jun 28, 2011
I have a UBUNTU server 10.04 LTS with 3 network interfaces (eth0,1,2) with eth0 is connected to my lan and others connected to two different ISPs , I am looking for a very flexible and complete monitoring tool which can monitor all of the traffic of incoming and outgoing of any interface and SPECIALLY can show me which local client made connection to which interface for connecting to internet in online mode not offline and it is good to have online web base interface I mean the interface shows the measured data in real time mode. I fount some tools like iftop and iptraf and many others in this url: http://www.ubuntugeek.com/bandwidth-...for-linux.html but non of them are suitable for my net I mean none of them have good web real time data and non of them shows "which local client made connection to which interface for connecting to internet".
View 2 Replies
View Related
Jul 6, 2011
Since this is my number 1 place for asking questions, I figured I would go here first. So I live in New Zealand where good internet doesn't exist yet, and I'm in a flat with 3 other people and we get 40gb a month which hasn't been lasting more than 2 weeks. It is somewhat of a mystery where all our data has gone, so I need a way to monitor usage. We use a variety of operating systems including linux, xp & windows 7 on my pc, and xbox 360. Is there any kind of integrated solution I can use to monitor everything with password protection so it can't be disabled? I have tried looking in the router, but it doesn't give me many statistics, and I think it combines lan with wan usage. At this stage I don't have the money to make a linux box to put between the router and the switch that can monitor everything, but if it comes to it, I will shell out for one.
View 3 Replies
View Related
Oct 11, 2010
On our webhosting servers, where is primary running apache, sometimes starts huge outgoing traffic to random IP addressess (each time of attack is it just one IP). It's always UDP,and according to my investigation tcpdump, it looks like p2p. The problem is in big outgoing traffic, and secondly in filling ip_conntract table /proc/net/ip_conntrack. I think, that one of our webhosting users has some virus uploaded on his FTP, which is time to time ran. I think, that if I can map outgoing traffic to particular process ID, it will be easy to find the PID in access log of webserver and than see what URL it causes.
What I have checked already:
- outgoing UDP connections are not listed in netstat - so cannot get PID from there
- Apache with PHP is in safe mode - cannot exec binaries, cgi is disabled
- I can see tons of records in tcpdump, but from the dump I'm not able to get PID
- In time of attack I was trying to run `lsof`, but nothing to see - didn't found the attacker
- I went through apache access log - I took time of attack -i.e. 02:22 am - grep from access log all hits between 02:20 and 02:29 am and try to call all them again - problem didn't occured
- checked the POST records from access log - nothing
- grepped all php files for keyword 'fsockopen' and 'torrent'
- from iptables --log-uid I have found user nobody (under apache is ran)
I think that the key is able to match outgoing connection to PID, than it will be easy.
View 1 Replies
View Related
May 8, 2009
I have a server rack that I lease out to others. I need a way to monitor each persons bandwidth usage. How can I do this without installing software on their machines or disrupting traffic flow? I have no access to the router, as it is owned by the colo company. I do have access to the switch and firewall, as well as my machines (linux) on the rack.
View 2 Replies
View Related
Aug 14, 2010
I have recently purchased dedicated box for game servers, I just wanted to install bandwidth monitoring software, however I have read comments regarding it as it uses lot of CPU resources. There is another method to monitor bandwidth using iptables. But that article is too complex for me: [URL]. I just want to check my overall bandwidth not from any particular ports. Any teaching commands to do that, as my new to Fedora. I use ssh to control my server.
View 6 Replies
View Related
Dec 10, 2010
I have been ask to provide a network monitoring utility that can create network benchmarks for applications to graphically see how it performs.
View 6 Replies
View Related
Jul 13, 2010
I was wondering how do you slap a packet analyzer like Wireshark somewhere between all the computers in a house and the router, so you can tell what websites are being accessed? I mean websites, specifically. I'm not trying to monitor bittorrent, IRC or other things yet - I'll get to that later. I just want to break this insanely complex task into smaller bites for now.Also, since my ISP has bandwidth caps but does not have a means for consumers to monitor total network usage, I'd like to figure out how to use Wireshark to do that as well. This, I am assuming, is easier when wireshark is running on the pipeline going into the router.
View 6 Replies
View Related
