Topic: Internet Usage Monitoring

[EScottH]

Hey all.  As many of you know from my past posts, I setup a gateway with SME Server 7 after getting a Copyright notice from my ISP.  I found out my daughter's boyfriend was torrenting copyrighted material.  Kicking him off the network isn't an option, as they use it for schoolwork and all their classes this semester are offline.  Additionally, may bandwidth usage has started going off the charts over the last three months.  The last straw was my going over the 250GB cap last month.  Being the type of person that likes to have proof before accusing, I am trying to make sure I have all the tools I need in place before I go making sweeping accusations.

That said, here is my network Topography:

Internet :: Motorola Surfboard SB6120 :: SME Server ETH0 GigaLAN :: SME Server Performing Gateway, Firewall and DNS Services :: SME Server ETH1 GigaLAN:: D-Link DGS1005G GigaLAN Switch

Now, from the switch, I have the following:

D-Link DGS1005G GigaLAN Switch Port 1 :: My Desktop
D-Link DGS1005G GigaLAN Switch Port 2 :: Linksys e2500 in Bridge/AP Mode
D-Link DGS1005G GigaLAN Switch Port 3 :: Seagate 3TB NAS/Print Server
D-Link DGS1005G GigaLAN Switch Port 4 :: Open

All users besides myself connect wirelessly through the AP.

Now, what I need are the proper tools installed so that I can monitor total data usage, port usage and process usage by IP address, MAC address, and/or Machine Name.

Frankly, I am too new to Linux to figure this out by myself, despite extensive searching on the forums and documentation. Any help will be greatly appreciated.

One note:  I don't want to have to resort to requiring user login to the network if at all possible.  I have 2 Wiis, a PS3, an X-Box 360, an Ethernet-enabled DirecTV DVR and an Ethernet-enabled Blu-Ray 3d/Netflix box that have issues with  network logins.

Thanks,

Scott

[Gary Douglas]

Install SARG contrib;  http://wiki.contribs.org/Sarg

[shawnbishop]

250GB!!!!.. , I have corporate clients with 300 users that don't get to 250GB

That is enormous...Have a look at SARG as well Dansguardian to block all the sites..

[mmccarn]

I think Sarg and Dansguardian are only going to give you usage stats on proxied web browsing activity.

If your problem is with P2P file sharing, you would need to do one of:
* Block all outbound traffic that isn't proxied by the SME
* Take a crash course in development and get Wondershaper working again.
* Install a network traffic monitor such as vnstat or ntop to identify the miscreant.
* Find out if all of your devices are SNMP enabled, and install an SNMP manager that will graph the network interface use by each device

[EScottH]

Thanks for the advice so far!  I will try these when I get home tomorrow.

Scott

[mmccarn]

FYI - I loaded up ntop on my SME 8b7 system, but can't get any response from the web interface

[compsos]

vnStat works ok from an ibay. Just shows up down and total.
See http://forums.contribs.org/index.php?topic=42444

[Bozely]

If your main priority is blocking certain types of internet sites try using OpenDNS or a similar service, simple to set up, websites are categorised by the community, you can choose which categories you do and don't want being used on your network and most importantly it's FREE.