Welcome to the most active Linux Forum on the web.
Go Back > Forums > Linux Forums > Linux - Networking
User Name
Linux - Networking This forum is for any issue related to networks or networking.
Routing, network cards, OSI, etc. Anything is fair game.


  Search this Thread
Old 03-17-2003, 06:02 PM   #1
Registered: Mar 2002
Distribution: Too many to count
Posts: 368

Rep: Reputation: 30
monitor router traffic

I am using redhat 7.1 and ipchains to route tcp/ip packets to about 18 other computers (it has two network cards, so you know what I'm talking about). Is there a way to monitor what websites people go to, since all traffic goes through the Linux router?
Old 03-18-2003, 11:40 AM   #2
Registered: Dec 2002
Posts: 327

Rep: Reputation: 30
You could use a packet sniffer (ethereal for instance) and parse out all the http traffic, run parser over *that* data and pick out all the web sites..

I don't recommend that though. You'll get a performance hit on your box, and a *heapload* of data.

Much better would be to install Squid as a transparent proxy, have all your machines point to your proxy and log the hits.

You gain the advantage of a nice log file, plus the caching ability of squid to improve the performance of your web browsing users

Old 03-18-2003, 12:54 PM   #3
Senior Member
Registered: Feb 2003
Location: The Real Washington
Distribution: Debian, Android
Posts: 1,819

Rep: Reputation: 46
I agree. Use a proxy. You can choose Privoxy, with all of its beautiful ad removing features, Squid, which will greatly speed page loads, or both (like me). That way you have full control and logging of sites visited and a more efficient internet connection.

Edit:I would also suggest upgrading to Iptables 1.2.7a from ipchains. It has a little bit of a learning curve, but is well worth it.

Last edited by Pcghost; 03-18-2003 at 12:55 PM.
Old 03-18-2003, 08:06 PM   #4
Registered: Mar 2002
Distribution: Too many to count
Posts: 368

Original Poster
Rep: Reputation: 30
How do I get squid working, and get dhcpd to had it out as a proxy (I suppose it must be set up like that)?
Old 03-19-2003, 05:39 PM   #5
Registered: Mar 2002
Distribution: Too many to count
Posts: 368

Original Poster
Rep: Reputation: 30
I need my linux router to be easy to use, so I'll just add "/usr/sbin/tcpdump > /root/tcpheaders.txt" to /etc/rc.d/rc.local. They dont use it locally, they use an old Windows version of ssh to administer it, so it doesn't matter that you cann't use it locally then. Thanks for the help.


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off

Similar Threads
Thread Thread Starter Forum Replies Last Post
How can I monitor traffic? anticuchos Linux - Networking 1 09-06-2005 03:16 AM
traffic monitor ? help caomeisanhao Linux - Networking 9 05-31-2005 03:28 PM
Can you monitor internet traffic? Mad Malc Linux - Security 5 08-02-2004 09:47 PM
Linux router - How can i monitor traffic Rooboy Linux - Networking 3 02-13-2004 02:19 PM
need traffic monitor SchwipSchwap Linux - Newbie 2 08-30-2003 02:31 AM > Forums > Linux Forums > Linux - Networking

All times are GMT -5. The time now is 01:10 PM.

Main Menu
Write for LQ is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration