January 19, 2016 at 9:44 am #44483
After having searching for a way to get the list of all active connections going through zeroshell, i’m a bit surprised not to find anything…
I would need to have the list of IPs and ports for all active TCP connections (and eventually UDP streams), especially to monitor the use of virtual servers. Do i need another tool?
Thank you!January 23, 2016 at 10:55 am #54013
nobody does that to monitor incoming/outgoing connections??January 25, 2016 at 5:30 pm #54014
Tried with CNTop button, on the Setup page, or even in firewall, connection tracking ?
RegardsJanuary 27, 2016 at 1:22 pm #54015
Thanks for your tips, but CNTop button shows only connexions sending/receiving enough data, is refreshed every seconds so it’s not possible to monitor active connexions, and, for example, a classical SSH connexion will never appear here.
Regarding the firewall logs, indeed the information can be retrieved… but you will need another tool to analyse the logs… it is clearly impossible to monitor active connexions reading the logs.February 17, 2017 at 7:39 am #54016
I am not sure if you already found the solution, but here i want to share how i am doing.
1. In the Captive Portal, you can see the connected clients.
2. Open the Log viewer and select Radiusd category, in the filter type Login….. it will show you all the login related entries….as soon as any new user is authenticated on the system, in the log it will appear.
Hope this helps
IlyasFebruary 23, 2017 at 3:09 pm #54017
Thanks for the answer. Not found and using external tools 😉
I don’t know the captive portal tool, i’ll have a look to the doc!
For the logs, i don’t have a radiusd category (the radius server being up)… but i’m not sure this is what i want, as i want to monitor all IP connexions.
ThanksFebruary 23, 2017 at 4:34 pm #54018
You need to turn on REDIUS to be able to see users who are getting authenticated
Turn on Accounting to log the users data usageFebruary 23, 2017 at 4:52 pm #54019
but i dont want it to be based on the usersFebruary 24, 2017 at 5:01 am #54020
then you need to install the add-on package “40e00, NTOP – Web-based traffic analysis and flow collection 2.4”
with NTOP you can monitor all types of connection and also monitor different applications, e.g if you selection FLOWS and from application filter, if you select facebook then you will be able to see from which IP connections facebook is running….
NTOP is much more for good monitoring.
I am very new to zeroshell world, only 3 wks now and i am very happy with it….
Hope this helps…
IlyasMarch 16, 2017 at 8:24 pm #54021
tcpdump is an option?
You must be logged in to reply to this topic.