Reply

Re: Monitor Connections?

Zap42
Aspirant

Monitor Connections?

Hi,

I want to monitor all connections to websites.

Ideally a log with date, time, target domain and any other details.

Does the X6 support this?

Any way to set it up?

 

Thanks in advance fir any help!

Model: R8000|Nighthawk X6 AC3200 Smart WIFI Router
Message 1 of 6
IrvSp
Master

Re: Monitor Connections?

 
 

@Zap42 wrote:

Hi,

I want to monitor all connections to websites.

Ideally a log with date, time, target domain and any other details.

Does the X6 support this?

Any way to set it up?

 

Thanks in advance fir any help!


Theoretically it should be able to. However it doesn't seem to work for me.

 

Under LOGGING there is this option:

 

Include in Log
Attempted access to allowed sites

 

I never see anything like that in the log? Possible that you need to BLOCK some sites (logging for attempting to go there is the next option) for that to work (I don't have any)?

Message 2 of 6
IrvSp
Master

Re: Monitor Connections?

Let me change my answer.

 

The answer is YES, but...

 

Besides enabling the logging choice, you MUST turn on BLOCKED SITES under ADVANCED, SECURITY, to ALWAYS (no blocking setting are needed). You'll then see logging like this:

 

[Site allowed: status.thawte.com] from source 192.168.1.30, Tuesday, May 29,2018 06:05:02
[Site allowed: ocsp.godaddy.com] from source 192.168.1.30, Tuesday, May 29,2018 06:05:02
[Site allowed: status.thawte.com] from source 192.168.1.30, Tuesday, May 29,2018 06:05:01
[Site allowed: ocsp.sca1b.amazontrust.com] from source 192.168.1.30, Tuesday, May 29,2018 06:05:01
[Site allowed: ocsp.digicert.com] from source 192.168.1.30, Tuesday, May 29,2018 06:05:01
[Site allowed: ocsp.int-x3.letsencrypt.org] from source 192.168.1.30, Tuesday, May 29,2018 06:05:00
[Site allowed: ocsp.godaddy.com] from source 192.168.1.30, Tuesday, May 29,2018 06:05:00
[Site allowed: ocsp.digicert.com] from source 192.168.1.30, Tuesday, May 29,2018 06:05:00
[Site allowed: ocsp.comodoca.com] from source 192.168.1.30, Tuesday, May 29,2018 06:05:00
[Site allowed: www.cnn.com] from source 192.168.1.30, Tuesday, May 29,2018 06:04:57
[Site allowed: cnn.com] from source 192.168.1.30, Tuesday, May 29,2018 06:04:57

 

Most of the above is just from going to CNN.COM... as that site goes to others as well.

 

That said, it will quickly fill your log up, I think it holds only 256 entries? However it seems the router doesn't send the log when full, just truncates it I beleive (not 100% sure). From the above example I'm not too sure this is of any real value?

 

Message 3 of 6
Zap42
Aspirant

Re: Monitor Connections?

@IrvSp thats very helpful thank you I will try it later today.

You mean we dont have to put any domain into the block list but it will work?

256 is not very much, but can help with testing.

Message 4 of 6
IrvSp
Master

Re: Monitor Connections?


@Zap42 wrote:

@IrvSp thats very helpful thank you I will try it later today.

You mean we dont have to put any domain into the block list but it will work?

256 is not very much, but can help with testing.


Yes, just enable the feature, at least it worked for me and I posted the log snippet for just trying to go to CNN.COM. Like I said, it appears this will fill the log very fast (I recall the log lines saved as 256, I could be wrong and it might hold more?). Ahh, found the size info HERE. Yes, 256 entries it seems... memory constraints I guess (it has to be stored somewhere)?

 

Problem is compounded by the number of devices accessing the web. If you have a lot of traffic and it takes 10 lines per access, you'd only get the LAST 25 or so (assuming all are 10 lines) and even then it might be hard to pickout the specific 'real' website lines?

 

Are you trying to restrict access to some (child?) or see where 'users' are going?

 

Obviously with such a limited time (I assume you'd be e-mailing yourself the log) you'd need to set the e-mai schedule to be either hourly or when full. Could you really be able to review possibly 15 logs per day of 256 lines?

 

All I can say it 'try it' I guess (and post back here your findings as I'd be interested)?

Message 5 of 6
Blanca_O
NETGEAR Moderator

Re: Monitor Connections?

Hi Zap42, 

 

We’d greatly appreciate hearing your feedback letting us know if the information IrvSp provided has helped resolve your issue or if you need further assistance.

 

Regards, 
Blanca 
Community Team

 

 

Message 6 of 6
Top Contributors
Discussion stats
  • 5 replies
  • 565 views
  • 0 kudos
  • 3 in conversation
Announcements