MikroTik

jult

"with this package you can access trafficflow traffic as json and accessible with web"

Again, I see nothing about it being accessible via the web. How, where?
I installed your pip package.

jult

netflow2json simplifies Netflow V9 traffic data management,with this package you can access trafficflow traffic as json and accessible with web,

I see nothing about it being accessible via the web on the github page. Please explain.

jult

Hey Jult: i will update this project with mikrotik trafficflow v9 (mikortik accounting is deprecated in RouterOS v7) and also using django web framework, stay patient ... Please make use of the basic intention of: https://github.com/jult/MikrotikTrafficMonitor All we really need is that chart, with...

jult

Two issues with this: - It runs only on winbox/webUI of the device itself. I'd rather see these stats remotely, like with https://github.com/Nixellion/MikrotikTrafficMonitor - I'd prefer having it count ALL LAN-IPs (or MAC address linked devices with their current IP), so not DHCP lease related, as ...

jult

But this is a remote, off-premise, storage/processing option. Nice, but that would cost you extra data/traffic to/from your WAN as well, and I don't think that's a good idea. It would even interfere with all the intended/normal traffic.

jult

, and I did that using some DHCP trickery and some shell scripts. They can't go online when they try and use private mode again. This will just be a temporary solution. What if they deny? I am not sure if you can turn this of pr network. So if you then take your device to a public net, you are at m...

jult

Regarding traffic logging. This is not some easy thing to do and will require lots of space and resources to log everything. Netflow is one way to do it, but that require another setup than just syslog. Yes, for the total traffic I've used LibreNMS for years, it does that pretty accurately using th...

jult

Of course, but that is not something I as a normal user am going to hit and for which I would need to do bookkeeping. When I have exceeded that limit I will get a letter. (this is for fixed connections, for mobile it is different and there are defined limits above which you will get a very low spee...

jult

Script updated to 5.3 Only a small addition to enable use of DNS for syslog. Set your DNS name so it resolve it to an IP within the script. This helps out if router is on public IP and syslog server are on a dynamic IP # Auto update syslog server. 5.3 (if not needed, put a # in front of next two li...

jult

Version 3.9 13.06.2023

:local AccuntData true

:if ($AccuntData) do={

You do realize it's "AccountData" ?

jult

Well that will probably vary by region. Here we have flat-rate internet, no charge for traffic. Yeah, "flat rate", wait until you go past your assumed or expected 'fair use'. No such thing as free/unlimited data traffic. I have yet to find any connectivity provider that doesn't charge bey...

jult

Shocking that such basic functionality is missing for the Graphing tool or web-interface. Really.
It's the most important value these days. Speeds are of no value. Total usage data (i.e. GB/day, GB/month) is what people pay for in every stage of the internet connectivity.

jult

It's really nice that mikrotik offers the graphing option per interface and per queue, that way you can see which port or IP is using bandwidth. What is lacking in the graphs though is th e total *used* data/traffic per day, week, month, year. It only shows max, averages and current. This is not ver...

jult

Hey Hesam; viewtopic.php?p=1017387

jult

Dude, you may want to show some screenshots/printscreens. It's not even clear if this requires a desktop or if it's shell-based. Or make a video showing us what it looks like. This is such a weird self-involved promo-page. You seem to forget that there are humans out there who see this not even know...

jult

This guy has coded a wonderful python tool to show Internet Usage per interface for Mikrotik routers; https://github.com/h-haghpanah/mikrotik_traffic_counter_en But I'm not proficient enough in both python or his redhat based packaging scheme to reverse engineer it for use in debian based systems, ...

jult

I actually killed all my other monitoring software a year ago and went back using the Dude. 6.49.7 in my case. Because I have a backup box running a mirror of the same dude database, it is pretty flawless for my network monitoring demands. Even if it is dead, I see no missing features the way it is ...

jult

You should place the Asus in AP mode only … this turns of the NAT and router functions of the Asus. Then you can exploit the Ethernet ports on the Asus … the WiFi of the Asus will become available to everyone on your network … in AP mode you can exploit the Asus WAN port … it just becomes another E...

jult

Thanks to a good friend at work we now have an ASUS wifi router with WiFi6 on it to join the network. This is mainly because people were complaining about the wifi stability issues regarding Apple devices and Mikrotik (seems to be a bad combo), and according to this friend they never have issues wit...

jult

Ultimately ROS6 will be phased out and replaced by ROS7. But that will still take quite some time.

On all devices? As I understand it, the hardware determines if 7.* is a good idea or not.

jult

We've been using Pihole with Unbound for years on an old openwrt box. I think you could even run openwrt on some mikrotik devices, and then install pihole with unbound.

jult

7.x is only required for newer hardware that does not support 6.x. If you don't need 7.x stay on 6.x for your production environments So, if my hardware came with a 6.* version, I should not upgrade to 7.* if I don't need extra features? If so, why is this not mentioned anywhere near the upgrade op...

jult

Can someone explain to me why one would run 7.2.1 instead of 6.49.6, aside from the cake support in the newer kernels ? Because honestly, thus far, after enormous amounts of experimenting and testing time, I have not found an advantage in using cake or fq_codel over the old 6.4* defaults, not for mi...

jult

Again, the winbox connections keep dropping 2 seconds after having logged in. This is for most devices here, after upgrades to 7.2.1, and with the latest winbox. This issue never existed with older winbox versions and older ROS releases (pre 7). Super annoying. Constantly having to Clear cache and j...

jult

I would like to stress that upgrading to 7.* should not be done for everyone. Thus far only the versions the devices came with seem to be stable for me.

jult

Well in RouterOS for my device there is a setting for WMM disable/enable/required but that does not mean it is available for you as well, because the collection of options differs depending on the model of router due to the chipset it uses. It may well be that it is not possible to set it on your r...

jult

Our Metal 52c access point kicks me out of Winbox after a 3 seconds, winbox keeps reconnecting and being kicked out. This is ever since 7.1.4 was put on it. I can no longer access the device, because I switched off its web-UI server. I used to be able to connect after having power-cycled, but now t...

jult

Our Metal 52c access point kicks me out of Winbox after a 3 seconds, winbox keeps reconnecting and being kicked out. This is ever since 7.1.4 was put on it. I can no longer access the device, because I switched off its web-UI server. I used to be able to connect after having power-cycled, but now th...

jult

*) wifiwave2 - added "client-isolation" feature;

Is this feature available for all wireless interfaces? Or is wifiwave2 some special device?

jult

I´ve changed my settings within the Bonding set, specially the "Transmit Hash Policy" from "Layer 2" to "Layer 2 and 3" and the disconnections are gone (until now for more than 24h) and my latency in the LAN went dramatically down from >30ms to 1-2ms :-) Have you ever ...

jult

I´ve tried 7.1.3 with clean config also, but it doesn´t work very well (WLAN Veeery sloooow and regulary discoonections of my WLAN dfevices) It seems there were some WLAN-related fixes with 7.2rc4 (but nothing was really mentioned in the change log, users just noticed ...) I updated our Metal 52 be...

jult

This is utter nonsense. There is not one valid thinkable argument in favor of doing this. In fact, if one AP power source fails, the other could remain up and thus function as a redundant backup for the other. You might want to rethink that comment. Has nothing to do with power source. Powerline co...

jult

Version 7.1.3 is definitely NOT stable. It crashes at my RB3011UiAS at least twice a day, and it is just during regular network operations, no changes are made at the router at that time. That's why I cannot really identify where it is crashing in particular, it just looks like a memory leak or som...

jult

Our Metal 52c access point kicks me out of Winbox after a second or two, winbox keeps reconnecting and being kicked out. This is ever since 7.1.3 was put on it. It doesn't start doing that right away, takes a day or two and then it does that. I can only access it after having power-cycled the AP. RB...

jult

PS I don't know if using a Powerline connection between the 2 AP's is an option. At least is must use the same electricity source. This is utter nonsense. There is not one valid thinkable argument in favor of doing this. In fact, if one AP power source fails, the other could remain up and thus func...

jult

Well, I made a change on Sunday. Haven't dropped internet since.

I can tell you guys what it was, or I can give you a chance to guess what the problem was. I'll reply here shortly with what it was just in case you wanted to take a swing at it.

What a crock of sh*t. You never did tell, did you?

jult

It's also not clear to me if mikrotik picked up the wifi work on any of their wifi gear: https://lwn.net/Articles/705884/ I've read it all, but it's unclear to me what you mean mikrotik should do on their wifi gear. Set the wireless interface to use fq_codel instead of sfq ? And if so, with what co...

jult

* Cake tries really hard to follow a bunch of mutually conflicting diffserv RFCs, and in an age where videoconferencing is very important the cake diffserv4 model is closer to how a wifi AP treats it. see: https://www.w3.org/TR/webrtc-priority/ for this underused facility in webrtc. As an end-user ...

jult

@juit I ran into this on several of my devices. You have to remove all extra packages in order to upgrade. So if you had the UPS or User Manager, you have to uninstall then you can upgrade, and then reinstall the available ones in 7.1.1. Only problem is: I never installed any extra packages. This i...

jult

RB3011UiAS - After update to RouterOS 6.49.2 I can't update to 7.1.1 version. System - Packages - Check for update show only 6.49.2 on ALL update channels Please, help me update to 7.1.1 version! Same here. 7.1.1 is shown as "testing" and "upgrade", but none of those work, when ...

jult

bandwidth limitations should be the same for everyone, just ether2 must have first priority over everything they want to access, bandwidth wise Did you ever get this working? I was looking for something similar, but thus far none of it makes much sense. Also, priority 1 is higher than 8 or is 8 hig...

jult

1. it isn't stable and finished 2. it is likely not the optimal type for the usage scenarios hinted by the type name you would use such queues Hmm.. I strongly disagree there. I've been part of the bufferbloat testers for over a decade now. fq_codel can be enabled for everything you'd like to try i...

jult

Just define new type...

> /queue/type/add kind=[TAB]
bfifo  cake  codel  fq-codel  mq-pfifo  none  pcq  pfifo  red  sfq

That's not the question, I see it listed among the types. I'm curious why it's not being used..

jult

Nevertheless, I notice that that CAKE / FQ_Codel Queueing Disciplines don't appear to be offered in either the Web GUI or /queue/types/print. I would like some more info on cake / fq_codel queueing as well. For instance, isn't it about time some of the defaults are using those queue types by now? T...

jult

I agree, if this would be useful for security-reasons, why is it even unticked by default? Also, why would you ever NOT want to use the source MAC? If people are trying to fake or clone MACs (like those stupid iPhones with 'privacy' setting..) this will only be detrimental to proper DHCP leases, and...

jult

While I have about 150 Mikrotiks out there as wireless devices... I just can't do it anymore. Just a waste of my time trying to get support to figure out what wrong with their gear. Much like I would never expect a Sony speaker to be worth a $h!+... Mikrotik wireless has let me down too many times ...

jult

Blast from the past, talking about pihole on a 6 year old topic named "Flow Control, should I use it?" Totally related. Bravo! Well yes, if only mikrotik routers were using "up to date" hardware and kernels, they would actually not still suffer from flow control related issues, ...

jult

Just found out that we can limit functionality through their AWS cloud, so I can shield it within LAN either way, I can block ALL access from those IPs to anything LAN-based, except DNS, which is still handy anyway, since that way I can see what these devices ask for every now and then.. So, how do ...

jult

Quick question, what if the IP addresses are assigned statically. Could one not make individual FW rules for each?? Source (badip) allow to internet Source (badIP) destination !badIP reject. hmmm I keep forgetting this will not stop layer 2 traffic within a subnet) - dum switches will connect devic...

jult

The wife and daughter are literally going insane with the amount of smart lightbulbs and smart plugs from a brand named meross. It's actually not that bad of a smart-brand, with lots of timely firmware updates and fairly recent protocols (tokens, keys, 2nd factor auth etc). They can be operated via ...

jult

Dont do this. Run your own DNS resolvers inside your own network. They query the root and aren't leaching another providers DNS infrastructure. I used to be a dns provider and it sucks when everyone sucks your resources for no return. If you are really fancy you run anycast DNS inside your network....

jult

Just an FYI for people running PPC devices, like the RB850Gx2 and similar, the docker sadly is not available for you.. Found that out, crushing my hopes of running pihole on a MT router.

jult

I am sick of "netinstall resolves it". It is like "format c:/" on old windows 98/xp systems. No, it's not. It's real easy to externally Save backups of your config with mikrotik devices and restore (almost always) works fine. I think in all the years I've managed mikrotik device...

jult

Issue on upgrading from 6.49 to 7.1rc4 on a 4011. Reboot loop - router reboots within 30-45s of startup if my PPTP VPNs are enabled. If I disable the VPN's or setup L2TP VPNs, works fine.

Try a netinstall and default config during that. For me that worked.

jult

If it's stuck on calculating download size then you need to remove any extra packages that are installed.

None. It's as it was by default. Never added any extras.

jult

So, is the download server for dev release down? Trying to update a RB 850Gx2 (PPC) with the dev release, but winbox keeps saying "calculating download size" and hangs on that. While trying any other package option (long-term, stable, testing) they all download fluently. Something I'm mis...

jult

So, is the download server for dev release down?

jult

************************************** @msatter wrote I find this " I have it and I don't give it to you " attitude very rude and disrespectful for all forum users . If you have something and you don't want to share it, keep it to yourself . Are you trying to get the users of the froum to...

jult

You don't understand me. I'm looking for similar solution like Pi-hole but for mikrotik. Some script. Don' want use adblock, ublock etc in my computers and mobile devices. But that would put pi-hole out of business, a very ruthless move on the part of MT. PiHole is not a business, it is an open sou...

jult

adaptive noise isolation on AP and client

So you've set this for all ios clients too? How did you do this?

jult

The theme in this thread is most people showing their configs are using RTS/CTS. There are a few blog posts from 2012 that show that Apple products do weird stuff with CTS. I had major issues with Apple, and it seems they stopped when I stopped using RTS/CTS. So anyone having issues with Apple and ...

jult

Most of us are more interested in when the stable v7 is released (with the newer cake/fq_codel supporting linux kernels), because honestly, cake is what everybody needs (now) and is waiting for. And, not unimportant, many other big brands are already using it. So, users are fleeing towards those oth...

jult

Did you find any solution to this, if so what was it?

jult

Latest version ROS (6.48.4) and latest Stable firmware (6.48.4), for a - RBMetalG-52SHPacn (only set up as a 2.4GHz AP) and a - RB4011iGS+5HacQ2HnD (as a 5GHz AP). Both wireless APs have serious issues with iPhones, iPads and iMacs (i.e. IOS), but not ever with android phones or Intel wifi laptop ni...

jult

Yes I did read the wiki page. Still no explanation on pros and cons of ethernet-default and why it is so much faster than hardware-only. I would, 6 years later, still have to agree. mikrotik offers granular control over what queue type (or "Kind" as mikrotik calls it) to use for what conn...

jult

Hey MikroTik, how to use the cake-autorate-ingress flag of cake? cake qdisc defaults to egress according to linux docs. No way to tell it, that it is ingress instead. So if you set cake-bandwidth to 50mbit and enable autoingress: it works for some minutes to finally reduce to 1mbit approx. I assume...

jult

and by golly, where the heck did I keep its original PoE box? [ sigh, the life of a sysadmin ]
MQS+powerbank: the sysadmin's best friend. https://mikrotik.com/product/mqs

Nice! Unfortunately that would arrive here a bit late in the game.

jult

FYI; Packages update towards the testing version for our Metal 52ac bricked the device. Have to do a netinstall in order to get it back to life again, I guess. Pretty cumbersome, because it is mounted outdoors on a high mast, which I can't reach in the dark, so I need to tell the users to wait it ou...

jult

Why not, you can install iPhone Zerotier client and then join your home LAN with this. People keep stating how 'simple' and 'easy' it should be to setup a zerotier link, but I can assure you: It's not. And everytime I tried it, and by now that's about 5 times over the last 5 years, it did not work,...

jult

My ISP tells me they fixed their bufferbloat issues, i.e. guessing they switched to fq_codel, or cake. So, it's time to also switch our mikrotik devices ques and buffers. Apparently I would have to upgrade to the latest 7.1 rc version, and then add the queue types? Is there a short how-to for that a...

jult

- never mind - using a different PC with netinstall worked.

Search found 71 matches