Per IP monitoring

[nccb]

New user, pondering Asus router purchase + Merlin FW. On the "per ip monitoring" feature - I was wondering does this just monitor bandwidth and give summary output? Or does it have more extensive logging features or blocking features? For example would I be able to see URL request history or specific domains visited by IP? I am looking to monitor kids activity.

Does anyone have part of a sample log they could post?

 

[RMerlin]

New user, pondering Asus router purchase + Merlin FW. On the "per ip monitoring" feature - I was wondering does this just monitor bandwidth and give summary output? Or does it have more extensive logging features or blocking features? For example would I be able to see URL request history or specific domains visited by IP? I am looking to monitor kids activity.

Does anyone have part of a sample log they could post?

It only tracks TCP/IP global traffic per client IP (inbound and outbound).

The realtime monitoring section look like this:

http://www.lostrealm.ca/tower/sites/default/files/content/site/asuswrt-merlin/iptraffic.png

I currently don't have it enabled so I can't show you a screenshot of the historical data, but basically it will just give you the amount of traffic that was downloaded and uploaded for each device on your network.

 

[nccb]

Thanks.

Is there in feature in this FW, stock Asus, or Tomato that does something like this (specific URL logging)?

 

[RMerlin]

Thanks.

Is there in feature in this FW, stock Asus, or Tomato that does something like this (specific URL logging)?

The RT-AC87U can report visited websites, through its DPI engine (that engine should be ported to the RT-AC56 and RT-AC68 in the coming months).

For other models, some Tomato variants support the Webmon module. This is something I might eventually implement in my firmware as a complement for those models that can't get the DPI engine, but this isn't a priority at the moment.

 

[nccb]

OK cool - thanks for the speedy response.

 

[nccb]

Sorry - do you mean that the Rt-ac87u can do visited websites with stock FW or merlin fw?

 

[RMerlin]

Sorry - do you mean that the Rt-ac87u can do visited websites with stock FW or merlin fw?

Both. The TrendMicro DPI engine comes from the stock FW.

 

[nccb]

Follow up question here.... I got the RT-AC87U and see the web history, but it only keeps a minimal amount. Any way to hack this, or dump the history per device to USB?

 

[RMerlin]

Follow up question here.... I got the RT-AC87U and see the web history, but it only keeps a minimal amount. Any way to hack this, or dump the history per device to USB?

It's closed-source.

 

[jax]

The RT-AC87U can report visited websites, through its DPI engine (that engine should be ported to the RT-AC56 and RT-AC68 in the coming months).

This is a feature I'm very interested in. I own the RT-N66U, do you for see being able to do more detailed tracking per-device (ie is there a way using custom iptables rules) or will I need to upgrade to newer hardware to get the upcoming DPI engine?

 

[RMerlin]

This is a feature I'm very interested in. I own the RT-N66U, do you for see being able to do more detailed tracking per-device (ie is there a way using custom iptables rules) or will I need to upgrade to newer hardware to get the upcoming DPI engine?

Unlikely that more detailed logging will be implemented on the older models. Someone might be able to manually set it up through the webmon IPTables modules, however this isn't something I feel like devoting time on, especially since websites are increasingly switching to HTTPS, which prevents logging anyway.