- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark
- Subscribe
- Printer Friendly Page
Netgear FVS336Gv3 - Tracing logs from defined URL to PC-client hostname
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Netgear FVS336Gv3 - Tracing logs from defined URL to PC-client hostname
Netgear FVS336Gv3
Firmware Version 4.3.4-2
OS and Environment: Windows 10, web interface
Dear Netgear Community,
For a given suspicious URL -for example- i need to be able to trace logs, to get definetively which PC/client has visited this suspected URL.
In the firewall DNS logs, i can see that URL logging is working as expected, for example:
Apr 1 10:31:19 [FVS336GV3] user.info dnsmasq: [DNSRESOLV]:suspecteddomain.com from 192.168.1.60\
Our LAN network is working via DHCP on the netgear firewall so internal IP can change and is not a good method to determine the desired client (phisical computer).
With the DHCP Logging enabled, i am supposed that i will be able to see what PC-name(hostname) when internal client gets certain IP.
In this case, i should compare the DHCP logs (and date time) and compare with date/time & IP.
Please any suggestion about any fiable method will be high apprecciated.
The goal as previously explained appears simple: determine the hostname that has visited a certain/given URL in time, keeping in mind that DHCP server could change internal IPs.
Thanks in advance for all help.
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Re: Netgear FVS336Gv3 - Tracing logs from defined URL to PC-client hostname
Hi amilmac,
Welcome to the community!
On "Network Configuration->LAN Settings->LAN Groups",after click "Refresh" button,will show all devices that connected to the firewall.
Hope it can help you.
Thanks
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Re: Netgear FVS336Gv3 - Tracing logs from defined URL to PC-client hostname
Hi Dan_Z
Thank you for your reply.
Yes, as you refer, i can see the CURRENTLY devices that are connected to firewall, but what happens if i need to check for devices connected in the past?
As i mentioned, by DHCP the client IP can change.
I mean that maybe I should search for the DHCP logs, so in this way i know the date&time and the MAC address assigned to it, so here i can trace.
Am I right? 🙂
Thank you very much!