Network internet access logging (live)

[beardie_the_dragon]

Hi,

Am looking to be able to log internet access from my network for individual users either by IP address or MAC address. Ideally it would be live and will resolve the numeric internet site IP addresses to domain names. I want to be able to log in remotely and view accesses etc.

Currently have an Asus RT-AC66U (merlin) router and a Synology NAS. Initialy thought the router could log to the NAS and find some analysis sw to run on the NAS but no luck

Curious to know if another router flashed with different fw could be the solution

Have seen Untangle but believe that needs a PC re-assigned to do this. Could by one for this but would prefer a standalone box (smallish)

Can anybody recommend a better solution than a microPC with 2 ethrnet ports running Untangle? What type of bw would this give?

Have a 100Mb Virgin internet connection

TIA

 

[Dennis Wood]

Pfsense running squid3 proxy, squidguard (to block access based on ACL) and lightsquid will do this quite nicely. Your only cost would be hardware, about $300 if you do a mini-itx build with a small SSD to store logs. Remote access via IPSec, or openvpn. Add in snort and you have a very nice all-in-one box to do routing, web reporting and intrusion detection. I have an older thread here "confessions of a pfsense newby" .. My motivation was primarily building a single box to do everything with a very low power footprint.

 

[chadster766]

Hi,

Am looking to be able to log internet access from my network for individual users either by IP address or MAC address. Ideally it would be live and will resolve the numeric internet site IP addresses to domain names. I want to be able to log in remotely and view accesses etc.

Currently have an Asus RT-AC66U (merlin) router and a Synology NAS. Initialy thought the router could log to the NAS and find some analysis sw to run on the NAS but no luck

Curious to know if another router flashed with different fw could be the solution

Have seen Untangle but believe that needs a PC re-assigned to do this. Could by one for this but would prefer a standalone box (smallish)

Can anybody recommend a better solution than a microPC with 2 ethrnet ports running Untangle? What type of bw would this give?

Have a 100Mb Virgin internet connection

TIA

Sounds like what you are looking for is the NetFlow feature. The NetFlow standard is normally supported by third party firmware's and natively by Cisco Routers.

I use free software or at least at the time it was free called PacketTrap NetFlow Listener.