I have setup a CCR-1009 to run as an internet router inside a company. It has a /29 from the provider from which
2 addresses are directly routed to systems and 2 others are used with NAT on internal networks (guest WiFi and LAN).
For the router it is all ethernet traffic (WiFi solution is outside the scope).
I would be interested in a simple accounting system that can show me a table of total incoming and outgoing traffic
per internal IP (the IPs on the DMZ and the NAT’ted IP’s on the other networks each separate). It would be OK when
some data is lost when the router is powercyled and maybe even when rebooted.
Is such a thing possible within a MikroTIk router? I have seen the “Accounting” option but it collects way too much
detail for me. I don’t need to (and don’t want to) keep stats on what external sites are generating the traffic, just the
internal IP’s that use it. Due to all that detail it also introduces the problem of having to download the data regularly
to prevent overflow. A 8192 entry table would be more than sufficient for this network to cover each user, but of course
not for each user-site pair.
So, is this possible without having to use a linked external system that gathers and stores the data.
It is not for billing purposes, only to get some overview and to investigate reports of overload or slowness.
Hi
I have been using accounting and sniffer service for the last year. works great. Each month can grab the txt file and transfer to excel for further analysis. Also great to see realtime who using what bandwidth.
instructions on this link http://forum.mikrotik.com/t/tool-realtime-per-ip-traffic-monitor-for-home-office/70028/1
if you have issues configuring let us know.
Apparently a Windows program… I have no Windows systems within reach.
What I would like to have seen is a feature that provides the textual table in the left half of the first screendump in
that thread, but in a normal WebFig page inside the router.
Web Access to the Local IP Traffic Accounting Table
Sub-menu: /ip accounting web-access
The web page report make it possible to use the standard Unix/Linux tool wget to collect the traffic data and save it to a file or to use MikroTik shareware Traffic Counter to display the table. If the web report is enabled and the web page is viewed, the snapshot will be made when connection is initiated to the web page. The snapshot will be displayed on the web page. TCP protocol, used by http connections with the wget tool guarantees that none of the traffic data will be lost. The snapshot image will be made when the connection from wget is initiated. Web browsers or wget should connect to URL: http://routerIP/accounting/ip.cgi
I think I have explained that I know about that option and that it is too detailed (and therefore its capacity is not enough)
for what I like to see. I have no need to, and therefore I don’t want to, collect a database of who is doing what.
Collecting and storing such information in a corporate environment requires a lot of explanation and documentation.
The table shown in that example is ample information, I only would need some option in the accounting to set
“collect by internal address only” and I can visit the current table whenever required.
hi, another rough way to do this is to add a simple queue for each internal IP (w speed 500m/500m or something very high so it wont queue the users). (you can use script + a for loop to generate many queues quickly, ie 254 of them for a /24 ), then in winbox add the columns for total-tx-bytes / rx-bytes. keep in mind if you use fast-track FW rule, that will bypass queues (so you wont see any data).
only do this if you have decent power / memory routerboard (ie you said a ccr1009, which would be fine)
there are better, more complex ways to accomplish this, but this is quick and easy way for simple data (ie for a few days or so).