Traffic Reporting

[Shnorkiller]

Hi all,

wondering if someone could please help point me in the right direction. I'm trying to setup a proxy of some sorts that will allow me to generate reports on who in the office has been to what websites. It'll obviously need to track and monitor all traffic too. What would be the best way to do this?

Hugely appreciated!

 

[itareanlnotani]

Do it on the router.
You'll need a *wrt of sorts. Otherwise Squid is decent (but will probably need more than your average router!)
Turn on syslog logging, and send the logs to an external machine.

If you are inflicted with windows then WallWatcher is apparently ok.
eg
http://www.makeuseof.com/tag/paranoid-monitoring-networks-comings-goings-wallwatcher-ddwrt/

 

[Shnorkiller]

Do it on the router.
You'll need a *wrt of sorts. Otherwise Squid is decent (but will probably need more than your average router!)
Turn on syslog logging, and send the logs to an external machine.

If you are inflicted with windows then WallWatcher is apparently ok.
eg
http://www.makeuseof.com/tag/paranoid-monitoring-networks-comings-goings-wallwatcher-ddwrt/

would that generate reports though? I'm led to believe squid and sarg are the best options. Comments?

 

[DrJohnZoidberg]

For a free* solution I would recommend setting up a pfSense box and install Squid, Squidguard and lightsquid for reporting.

* Obviously you need your own hardware (or vm).

 

[Shnorkiller]

For a free* solution I would recommend setting up a pfSense box and install Squid, Squidguard and lightsquid for reporting.

* Obviously you need your own hardware (or vm).

Thank you - will look into this!

 

[PsyWulf]

Yep,PFSense ftw
And be aware that HTTPS site logging/filtering won't be doable in Transparent mode unless you mess with the SSL Interception