RE: [WISPA] more ip tracking upgrades
now that's cool. See if Brandon can figure out the how many hosts are behind that IP address solution where you can then figure out who's reselling your service or just plain sharing it with everyone and their neighbor, at your expense. I've heard there's a set of bytes in the netflow headers that will tell you the mac address of the host behind the NAT box... -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Marlon K. Schafer Sent: Thursday, December 14, 2006 12:38 AM To: WISPA General List Subject: [WISPA] more ip tracking upgrades Brandon has just made some changes on our tracking system. The biggest one is that we can now see top users per day. This will allow us to follow more of what's going on at night. Like yesterday, someone sent 3 gigs up to the net. They've got something on their machine that they are really not gonna want. Trying to pick that one customer out of all of the traffic that normally goes on was a real pain. With the new stuff it was a cake walk. radius.odessaoffice.com/iptrack laters, marlon -- WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/ -- WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/
RE: [WISPA] more ip tracking upgrades
On Thu, 14 Dec 2006, Rick Smith wrote: I've heard there's a set of bytes in the netflow headers that will tell you the mac address of the host behind the NAT box... No..not the mac address, but it is reasonable to guess the number of computers behind a nat device. This is based on the TCP timestamp, if I recall correctly. There are a few whitepapers floating around, that google probably could find for you.. :-) -- Butch Evans Network Engineering and Security Consulting 573-276-2879 http://www.butchevans.com/ Mikrotik Certified Consultant (http://www.mikrotik.com/consultants.html) -- WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/
Re: [WISPA] more ip tracking upgrades
That might be interesting. In our case we don't mind (much) if that happens. Naturally, it's totally against out TOS. However, we bill per bit. If you want to share it with everyone around you, you just have to pay for the privilege. And I don't get stuck with all of the tech support :-). One thing I wish I did have was something that would tell me what protocol people were using most. I think that might help me spot the ptp junkies. I did ask him to add an average figure anywhere there was a total. Like what's the average of all users? How about the top 25 users? etc. Marlon (509) 982-2181 Equipment sales (408) 907-6910 (Vonage)Consulting services 42846865 (icq)And I run my own wisp! 64.146.146.12 (net meeting) www.odessaoffice.com/wireless www.odessaoffice.com/marlon/cam - Original Message - From: Rick Smith [EMAIL PROTECTED] To: 'WISPA General List' wireless@wispa.org Sent: Thursday, December 14, 2006 4:55 AM Subject: RE: [WISPA] more ip tracking upgrades now that's cool. See if Brandon can figure out the how many hosts are behind that IP address solution where you can then figure out who's reselling your service or just plain sharing it with everyone and their neighbor, at your expense. I've heard there's a set of bytes in the netflow headers that will tell you the mac address of the host behind the NAT box... -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Marlon K. Schafer Sent: Thursday, December 14, 2006 12:38 AM To: WISPA General List Subject: [WISPA] more ip tracking upgrades Brandon has just made some changes on our tracking system. The biggest one is that we can now see top users per day. This will allow us to follow more of what's going on at night. Like yesterday, someone sent 3 gigs up to the net. They've got something on their machine that they are really not gonna want. Trying to pick that one customer out of all of the traffic that normally goes on was a real pain. With the new stuff it was a cake walk. radius.odessaoffice.com/iptrack laters, marlon -- WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/ -- WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/ -- WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/
Re: [WISPA] more ip tracking upgrades
If your IP addy's aren't changing often you can use ntop to classify traffic for you. I use it to tell whether or not traffic is human-generated or if it's from a worm or p2p. http://www.ntop.org Mark Nash Network Engineer UnwiredOnline.Net 350 Holly Street Junction City, OR 97448 http://www.uwol.net 541-998- 541-998-5599 fax - Original Message - From: Marlon K. Schafer (509) 982-2181 [EMAIL PROTECTED] To: WISPA General List wireless@wispa.org Sent: Thursday, December 14, 2006 8:56 AM Subject: Re: [WISPA] more ip tracking upgrades That might be interesting. In our case we don't mind (much) if that happens. Naturally, it's totally against out TOS. However, we bill per bit. If you want to share it with everyone around you, you just have to pay for the privilege. And I don't get stuck with all of the tech support :-). One thing I wish I did have was something that would tell me what protocol people were using most. I think that might help me spot the ptp junkies. I did ask him to add an average figure anywhere there was a total. Like what's the average of all users? How about the top 25 users? etc. Marlon (509) 982-2181 Equipment sales (408) 907-6910 (Vonage)Consulting services 42846865 (icq)And I run my own wisp! 64.146.146.12 (net meeting) www.odessaoffice.com/wireless www.odessaoffice.com/marlon/cam - Original Message - From: Rick Smith [EMAIL PROTECTED] To: 'WISPA General List' wireless@wispa.org Sent: Thursday, December 14, 2006 4:55 AM Subject: RE: [WISPA] more ip tracking upgrades now that's cool. See if Brandon can figure out the how many hosts are behind that IP address solution where you can then figure out who's reselling your service or just plain sharing it with everyone and their neighbor, at your expense. I've heard there's a set of bytes in the netflow headers that will tell you the mac address of the host behind the NAT box... -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Marlon K. Schafer Sent: Thursday, December 14, 2006 12:38 AM To: WISPA General List Subject: [WISPA] more ip tracking upgrades Brandon has just made some changes on our tracking system. The biggest one is that we can now see top users per day. This will allow us to follow more of what's going on at night. Like yesterday, someone sent 3 gigs up to the net. They've got something on their machine that they are really not gonna want. Trying to pick that one customer out of all of the traffic that normally goes on was a real pain. With the new stuff it was a cake walk. radius.odessaoffice.com/iptrack laters, marlon -- WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/ -- WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/ -- WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/ -- WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/
[WISPA] more ip tracking upgrades
Brandon has just made some changes on our tracking system. The biggest one is that we can now see top users per day. This will allow us to follow more of what's going on at night. Like yesterday, someone sent 3 gigs up to the net. They've got something on their machine that they are really not gonna want. Trying to pick that one customer out of all of the traffic that normally goes on was a real pain. With the new stuff it was a cake walk. radius.odessaoffice.com/iptrack laters, marlon -- WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/
