Page 1 of 1

Is it possible to monitor subscriber what website they visit

Posted: Fri Nov 06, 2009 12:23 pm
by birendersinghbudhwar
Hi i want to know that is any way that i cam monitor the subscribers visiting the website. please don't mis understand it this is because of the Govt rule for the hotspots in our country to avoid any kind of terr activities.

Birender Singh Budhwar

Re: Is it possible to monitor subscriber what website they visit

Posted: Fri Nov 06, 2009 6:23 pm
by fewi
http://wiki.mikrotik.com/wiki/Traffic_Flow
http://wiki.mikrotik.com/wiki/CALEA

Unless you just need to monitor URLs, in which case a Squid proxy with logging configured right or a DNS resolver with logging configured right might suffice.

Re: Is it possible to monitor subscriber what website they visit

Posted: Fri Nov 06, 2009 7:00 pm
by birendersinghbudhwar
http://wiki.mikrotik.com/wiki/Traffic_Flow
http://wiki.mikrotik.com/wiki/CALEA

Unless you just need to monitor URLs, in which case a Squid proxy with logging configured right or a DNS resolver with logging configured right might suffice.
My is an WindowsXp box were as Squid is an Linux based proxy server any comments

Re: Is it possible to monitor subscriber what website they visit

Posted: Fri Nov 06, 2009 7:02 pm
by fewi
replace "Squid proxy configured for logging" with "any old proxy you like as long as it can be configured to log what you need it to log"

Re: Is it possible to monitor subscriber what website they visit

Posted: Fri Nov 06, 2009 8:28 pm
by rmichael
Check out lightsquid for nice squid reports. If you don't want to use proxy use netflow analyzer like scrutinizer. Cacti has some tools for netflow but requires programming.

Can you share what goverment regulations you have to follow (what activity to watch and how long to keep)- just curious...

Re: Is it possible to monitor subscriber what website they visit

Posted: Sat Nov 07, 2009 8:26 am
by birendersinghbudhwar
Check out lightsquid for nice squid reports. If you don't want to use proxy use netflow analyzer like scrutinizer. Cacti has some tools for netflow but requires programming.

Can you share what goverment regulations you have to follow (what activity to watch and how long to keep)- just curious...
Govt regulation is that what person visiting online it may be concern to any terr activities like visiting any website which having volition content like war related and bomb formulas, anti social activities etc... were person make community to do these kind of activities were discuss terr kind of activities.

Because know day Internet is the only of easy place were person can communicate over chating or by blogs etc.., as know day we can see many websites related to terr activities etc.. many other info which is not in favor of a country etc......

Re: Is it possible to monitor subscriber what website they visit

Posted: Tue Jan 05, 2010 5:34 pm
by AnRkey
Squid runs just fine on Winblows XP >> http://wiki.squid-cache.org/SquidFaq/Bi ... es#Windows

I have it running on a few sites, very very stable too.

R

PS: Take a look at SARG for logging

Re: Is it possible to monitor subscriber what website they visit

Posted: Wed Jan 06, 2010 9:23 am
by normis
Why use squid, if all the tools already built into RouterOS?

http://wiki.mikrotik.com/wiki/Webproxy_logging

Re: Is it possible to monitor subscriber what website they visit

Posted: Wed Jan 06, 2010 10:30 am
by macgaiver

Re: Is it possible to monitor subscriber what website they visit

Posted: Thu Jan 07, 2010 3:01 am
by dnyl
Hi!

Is it possible to simple logging our users ( pppoe with nat ) traffic logging to freebsd server with remote logging?
We try the remote logging, it is working then we use pppoe logging, but it isn't log the traffic.

What is the best solution?

Re: Is it possible to monitor subscriber what website they visit

Posted: Thu Jan 07, 2010 4:44 pm
by fewi
Do you mean syslog? You technically can have firewall log rules that on new connections log destination and source IP address, but that would create a lot of traffic and be far from the best solution. Your best bets are traffic flow, CALEA or a logging proxy as described in this thread.