[ubuntu-za] Monitoring Bandwidth used on a Home Network

[Soren Aalto]

On Thu, Mar 10, 2011 at 12:30 PM, frans <dormakorp at vodamail.co.za> wrote:

> How would you log traffic usage on SSH ? More specificaly, if a user
>>>> on your LAN uses SSH as a tunnel to download stuff of another server,
>>>> how would you log that traffic usage?
>>>>
>>>> OR, how would you log POP3 traffic usage with SQUID?
>>>>
>>>>
>>>>
>>>>  add to you squid config
>>> "
>>> acl Safe_ports port 110
>>> acl Safe_ports port 25
>>> acl Safe_ports port 22
>>> etc.
>>>
>>>

> "
>>> Now point those ports to the squid proxy, from your firewall/gateway,
>>> which
>>> should be the only route any computer on your network have to the
>>> internet.
>>>  It's not necessary to do caching on the ports.
>>>
>>

No, this won't work -- this will let you connect a web browser
through the proxy to a remote webserver running on those
ports.

Squid isn't a port forwarder -- it's an HTTP proxy.  It expects
either

- an HTTP request to come in (and that's how it decides what to
  connect to...by looking at the hostname in the HTTP request)
- or a CONNECT request.

...but you've reminded me about the captive portal + bandwidth
accounting project that I keep working on, and should have
finished by the time I turn 160 at the current rate of progress.


>
>>> Get a log file analyser for squid (like sarg) to analyse the logs, and
>>> you
>>> should be able to see everything that passed through the Proxy in a nice
>>> human readable format.
>>>
>>> That's the logic behind my thinking anyway, if there are some other place
>>> where configuration for log files in squid are done, it might be
>>> necessary
>>> to update that also but as far as I know every thing get logged.
>>>
>>>
>>>
>>>
>> mmm, interesting. With this approach you would need to add every port
>> that you want to monitor to the squid config.
>>
>>  and if you forward all ports to squid, it should also give you some type
> of control over which protocols are used as well as what websites can be
> visited by whom, etc.
>
>
> --
> ubuntu-za mailing list
> ubuntu-za at lists.ubuntu.com
> https://lists.ubuntu.com/mailman/listinfo/ubuntu-za
>



-- 
Soren Aalto
Director: ICT
University of Zululand
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.ubuntu.com/archives/ubuntu-za/attachments/20110401/3aac3f44/attachment.html>