Hi i want to know that is any way that i cam monitor the subscribers visiting the website. please don’t mis understand it this is because of the Govt rule for the hotspots in our country to avoid any kind of terr activities.
Birender Singh Budhwar
http://wiki.mikrotik.com/wiki/Traffic_Flow
http://wiki.mikrotik.com/wiki/CALEA
Unless you just need to monitor URLs, in which case a Squid proxy with logging configured right or a DNS resolver with logging configured right might suffice.
My is an WindowsXp box were as Squid is an Linux based proxy server any comments
replace “Squid proxy configured for logging” with “any old proxy you like as long as it can be configured to log what you need it to log”
Check out lightsquid for nice squid reports. If you don’t want to use proxy use netflow analyzer like scrutinizer. Cacti has some tools for netflow but requires programming.
Can you share what goverment regulations you have to follow (what activity to watch and how long to keep)- just curious…
Govt regulation is that what person visiting online it may be concern to any terr activities like visiting any website which having volition content like war related and bomb formulas, anti social activities etc… were person make community to do these kind of activities were discuss terr kind of activities.
Because know day Internet is the only of easy place were person can communicate over chating or by blogs etc.., as know day we can see many websites related to terr activities etc.. many other info which is not in favor of a country etc…
Squid runs just fine on Winblows XP >> http://wiki.squid-cache.org/SquidFaq/BinaryPackages#Windows
I have it running on a few sites, very very stable too.
R
PS: Take a look at SARG for logging
Why use squid, if all the tools already built into RouterOS?
Hi!
Is it possible to simple logging our users ( pppoe with nat ) traffic logging to freebsd server with remote logging?
We try the remote logging, it is working then we use pppoe logging, but it isn’t log the traffic.
What is the best solution?
Do you mean syslog? You technically can have firewall log rules that on new connections log destination and source IP address, but that would create a lot of traffic and be far from the best solution. Your best bets are traffic flow, CALEA or a logging proxy as described in this thread.