RE: [CentOS] Internet usage monitoring

2008-01-23 Thread Dennis McLeod
You mean to audit where people are going?
We have a (vendor provided) Websense server. Contract was for 3 years
(longer than I've been here). It'll be up soon. At the current rate, it's
about a 12,000.00/year savings to go to squid.
I have already put up a Centos5 box with Squid, and squidguard for testing
(on an old IBM NetVista workstation P3). Sarge looks good for reports, I
really don't need the advanced reporting features, just the actual BLOCKING
part, and a little bit of auditing. We really just want the legal liability
issue covered.
I won't bother with the transparent part, just restrict access out to the
internet in the firewall to the squid box only, which will force the client
machines to use the proxy settings. I would dump those down to the machine
as part of a logon script. I'd probably set a few machines (the owner,
myself, and any server that DOES need to go to the internet) to be able to
go around the proxy too.

I also currently USE an IPcop box on my public internet access (we provide a
couple of pc's plus wireless access for customers) in our waiting areas.
It also has the squidguard add-in. We had a couple of instances where
customers were surfing porn in our waiting area. I put that up in less than
a day, on an old Compaq P3, with a 10g drive. I have a standalone D-Link
access point to provide the wireless. I can look through the squid and
squidguard logs to see where people have been. It goes out a completely
separate DSL account.

I also tried out Cyfin Reporter (Google: wavecrest) in anticipation, in
order to generate internet usage reports. I copied the squid logs, both from
the ipcop box and from my test box, over to my PC (XP), setup Cyfin
reporter, and got BEAUTIFUL reports. I used Cyblock ISA (an older product
that integrated with ISA Server 2000) at a previous employer, and can
honestly say I've never seen easier to read and understand reports
(especially when you need to send it to an HR person, you don't have to
explain everything.)

The ONLY issue I have to work out is the reporting method. It's a workgroup
environment on XP, with local logon. I am forced to report based on IP
address, vs logon name. I'm working on the domain logon part...

If you mean Traffic to the internet, I use MRTG to query my switches and
routers. I have a webpage on my intranet that puts all the graphs together.


Dennis

 


 

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf
Of dnk
Sent: Tuesday, January 22, 2008 4:48 PM
To: Centos List
Subject: [CentOS] Internet usage monitoring

I was just curious what other admins were using to monitor internet
usage just a squid transparent proxy with something like sarge?

Thanks!

dnk
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


RE: [CentOS] Internet usage monitoring

2008-01-23 Thread Dennis McLeod
Sorry if my last reply was off base.

He said internet usage which I took as client machines surfing
webpages
I would have replied different if it was internet traffic.
I guess I just heard it differently...
Anyway, I hope it was useful for someone
Dennis




-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf
Of John R Pierce
Sent: Tuesday, January 22, 2008 8:26 PM
To: CentOS mailing list
Subject: Re: [CentOS] Internet usage monitoring

jarmo wrote:
 How about webalizer?
 http://www.mrunix.net/webalizer/
   

thats for analyzing a webserver's logs. poster dnk wanted to monitor 
his internet usage, which I assume is router traffic.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Internet usage monitoring

2008-01-23 Thread dnk
Yup. One of my clients want to add this ability to their already in
place centos firewall.

Dnk

On Jan 22, 2008 6:11 PM, Craig Van Ham [EMAIL PROTECTED] wrote:
 Are you doing this for yourself or to monitor users on a network?




 -Original Message-
 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf
 Of John R Pierce
 Sent: Tuesday, January 22, 2008 7:42 PM
 To: CentOS mailing list
 Subject: Re: [CentOS] Internet usage monitoring

 dnk wrote:
  I was just curious what other admins were using to monitor internet
  usage just a squid transparent proxy with something like sarge?
 


 ntop for snapshot analysis

 cacti/rdtool for long term traffic graphing (this replaces the venerable
 mrtg)


 ___
 CentOS mailing list
 CentOS@centos.org
 http://lists.centos.org/mailman/listinfo/centos

 ___
 CentOS mailing list
 CentOS@centos.org
 http://lists.centos.org/mailman/listinfo/centos

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Internet usage monitoring

2008-01-23 Thread dnk
Thanks to all for the pointers. I will likely go with a squid based
(transparent or some sort of iptables rules) proxy, as some of the
users there are on roaming laptops, and I do not want them to have to
reset proxy settings, etc.

Much appreciated.

dnk

On Jan 23, 2008 10:26 AM, dnk [EMAIL PROTECTED] wrote:
 Yup. One of my clients want to add this ability to their already in
 place centos firewall.

 Dnk


 On Jan 22, 2008 6:11 PM, Craig Van Ham [EMAIL PROTECTED] wrote:
  Are you doing this for yourself or to monitor users on a network?
 
 
 
 
  -Original Message-
  From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf
  Of John R Pierce
  Sent: Tuesday, January 22, 2008 7:42 PM
  To: CentOS mailing list
  Subject: Re: [CentOS] Internet usage monitoring
 
  dnk wrote:
   I was just curious what other admins were using to monitor internet
   usage just a squid transparent proxy with something like sarge?
  
 
 
  ntop for snapshot analysis
 
  cacti/rdtool for long term traffic graphing (this replaces the venerable
  mrtg)
 
 
  ___
  CentOS mailing list
  CentOS@centos.org
  http://lists.centos.org/mailman/listinfo/centos
 
  ___
  CentOS mailing list
  CentOS@centos.org
  http://lists.centos.org/mailman/listinfo/centos
 

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] Internet usage monitoring

2008-01-22 Thread dnk
I was just curious what other admins were using to monitor internet
usage just a squid transparent proxy with something like sarge?

Thanks!

dnk
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Internet usage monitoring

2008-01-22 Thread Shawn Everett
 I was just curious what other admins were using to monitor internet
 usage just a squid transparent proxy with something like sarge?

 Thanks!

 dnk

I've been using ntop with great success.

Shawn

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Internet usage monitoring

2008-01-22 Thread John R Pierce

dnk wrote:

I was just curious what other admins were using to monitor internet
usage just a squid transparent proxy with something like sarge?
  



ntop for snapshot analysis

cacti/rdtool for long term traffic graphing (this replaces the venerable 
mrtg)



___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


RE: [CentOS] Internet usage monitoring

2008-01-22 Thread Craig Van Ham
Are you doing this for yourself or to monitor users on a network?

 

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf
Of John R Pierce
Sent: Tuesday, January 22, 2008 7:42 PM
To: CentOS mailing list
Subject: Re: [CentOS] Internet usage monitoring

dnk wrote:
 I was just curious what other admins were using to monitor internet
 usage just a squid transparent proxy with something like sarge?
   


ntop for snapshot analysis

cacti/rdtool for long term traffic graphing (this replaces the venerable 
mrtg)


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Internet usage monitoring

2008-01-22 Thread jarmo
John R Pierce kirjoitti viestissään (lähetysaika keskiviikko, 23. tammikuuta 
2008):
 dnk wrote:
  I was just curious what other admins were using to monitor internet
  usage just a squid transparent proxy with something like sarge?

 ntop for snapshot analysis

 cacti/rdtool for long term traffic graphing (this replaces the venerable
 mrtg)

How about webalizer?
http://www.mrunix.net/webalizer/

Jarmo
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Internet usage monitoring

2008-01-22 Thread John R Pierce

jarmo wrote:

How about webalizer?
http://www.mrunix.net/webalizer/
  


thats for analyzing a webserver's logs. poster dnk wanted to monitor 
his internet usage, which I assume is router traffic.

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Internet usage monitoring

2008-01-22 Thread Matt Shields
On Jan 22, 2008 11:26 PM, John R Pierce [EMAIL PROTECTED] wrote:
 jarmo wrote:
  How about webalizer?
  http://www.mrunix.net/webalizer/
 

 thats for analyzing a webserver's logs. poster dnk wanted to monitor
 his internet usage, which I assume is router traffic.


Yes, but you can also use it to analyzer squid logs.  So if you're
using Squid proxy, then you can charge on your internet usage.


-- 
-matt
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Internet usage monitoring

2008-01-22 Thread John R Pierce

Matt Shields wrote:

Yes, but you can also use it to analyzer squid logs.  So if you're
using Squid proxy, then you can charge on your internet usage.
  


that only tracks proxied web traffic, which isn't necessarily all 
internet usage.


yes, if you want to analyze WEB usage specifically, there ya go.

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos