After having searching for a way to get the list of all active connections going through zeroshell, i’m a bit surprised not to find anything…
I would need to have the list of IPs and ports for all active TCP connections (and eventually UDP streams), especially to monitor the use of virtual servers. Do i need another tool?
Thanks for your tips, but CNTop button shows only connexions sending/receiving enough data, is refreshed every seconds so it’s not possible to monitor active connexions, and, for example, a classical SSH connexion will never appear here.
Regarding the firewall logs, indeed the information can be retrieved… but you will need another tool to analyse the logs… it is clearly impossible to monitor active connexions reading the logs.
I am not sure if you already found the solution, but here i want to share how i am doing.
1. In the Captive Portal, you can see the connected clients.
2. Open the Log viewer and select Radiusd category, in the filter type Login….. it will show you all the login related entries….as soon as any new user is authenticated on the system, in the log it will appear.
Thanks for the answer. Not found and using external tools 😉
I don’t know the captive portal tool, i’ll have a look to the doc!
For the logs, i don’t have a radiusd category (the radius server being up)… but i’m not sure this is what i want, as i want to monitor all IP connexions.
then you need to install the add-on package “40e00, NTOP – Web-based traffic analysis and flow collection 2.4”
with NTOP you can monitor all types of connection and also monitor different applications, e.g if you selection FLOWS and from application filter, if you select facebook then you will be able to see from which IP connections facebook is running….
NTOP is much more for good monitoring.
I am very new to zeroshell world, only 3 wks now and i am very happy with it….