www.zeroshell.org Forum Index www.zeroshell.org
Linux Distribution for server and embedded devices
 
 SearchSearch  RegisterRegister  UsergroupsUsergroups 
 ProfileProfile  Log inLog in  Log in to check your private messagesPrivate Message 

List of all active connections

 
Post new topic   Reply to topic    www.zeroshell.org Forum Index -> ZeroShell
View previous topic :: View next topic  
Author Message
Montikore



Joined: 19 Jan 2016
Posts: 22

PostPosted: Tue Jan 19, 2016 9:44 am    Post subject: List of all active connections Reply with quote

Hi all,
After having searching for a way to get the list of all active connections going through zeroshell, i'm a bit surprised not to find anything...
I would need to have the list of IPs and ports for all active TCP connections (and eventually UDP streams), especially to monitor the use of virtual servers. Do i need another tool?

Thank you!
Back to top
View user's profile Send private message
Montikore



Joined: 19 Jan 2016
Posts: 22

PostPosted: Sat Jan 23, 2016 10:55 am    Post subject: Reply with quote

nobody does that to monitor incoming/outgoing connections??
Back to top
View user's profile Send private message
redfive



Joined: 27 Aug 2009
Posts: 232

PostPosted: Mon Jan 25, 2016 5:30 pm    Post subject: Reply with quote

Tried with CNTop button, on the Setup page, or even in firewall, connection tracking ?
Regards
Back to top
View user's profile Send private message
Montikore



Joined: 19 Jan 2016
Posts: 22

PostPosted: Wed Jan 27, 2016 1:22 pm    Post subject: Reply with quote

Thanks for your tips, but CNTop button shows only connexions sending/receiving enough data, is refreshed every seconds so it's not possible to monitor active connexions, and, for example, a classical SSH connexion will never appear here.
Regarding the firewall logs, indeed the information can be retrieved... but you will need another tool to analyse the logs... it is clearly impossible to monitor active connexions reading the logs.
Back to top
View user's profile Send private message
itanveer



Joined: 09 Feb 2017
Posts: 6

PostPosted: Fri Feb 17, 2017 7:39 am    Post subject: How to check connected users Reply with quote

Hello,

I am not sure if you already found the solution, but here i want to share how i am doing.

1. In the Captive Portal, you can see the connected clients.

or

2. Open the Log viewer and select Radiusd category, in the filter type Login..... it will show you all the login related entries....as soon as any new user is authenticated on the system, in the log it will appear.

Hope this helps

Ilyas
Back to top
View user's profile Send private message
Montikore



Joined: 19 Jan 2016
Posts: 22

PostPosted: Thu Feb 23, 2017 3:09 pm    Post subject: Reply with quote

Hi,

Thanks for the answer. Not found and using external tools Wink
I don't know the captive portal tool, i'll have a look to the doc!
For the logs, i don't have a radiusd category (the radius server being up)... but i'm not sure this is what i want, as i want to monitor all IP connexions.

Thanks
Back to top
View user's profile Send private message
itanveer



Joined: 09 Feb 2017
Posts: 6

PostPosted: Thu Feb 23, 2017 4:34 pm    Post subject: Reply with quote

You need to turn on REDIUS to be able to see users who are getting authenticated

Turn on Accounting to log the users data usage
Back to top
View user's profile Send private message
Montikore



Joined: 19 Jan 2016
Posts: 22

PostPosted: Thu Feb 23, 2017 4:52 pm    Post subject: Reply with quote

but i dont want it to be based on the users
Back to top
View user's profile Send private message
itanveer



Joined: 09 Feb 2017
Posts: 6

PostPosted: Fri Feb 24, 2017 5:01 am    Post subject: Reply with quote

then you need to install the add-on package "40e00, NTOP - Web-based traffic analysis and flow collection 2.4"

with NTOP you can monitor all types of connection and also monitor different applications, e.g if you selection FLOWS and from application filter, if you select facebook then you will be able to see from which IP connections facebook is running....

NTOP is much more for good monitoring.

I am very new to zeroshell world, only 3 wks now and i am very happy with it....

Hope this helps...

Ilyas
Back to top
View user's profile Send private message
vitotafuni



Joined: 16 Mar 2017
Posts: 3

PostPosted: Thu Mar 16, 2017 8:24 pm    Post subject: Reply with quote

tcpdump is an option?
Back to top
View user's profile Send private message
Display posts from previous:   
Post new topic   Reply to topic    www.zeroshell.org Forum Index -> ZeroShell All times are GMT
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum


Powered by phpBB © 2001, 2005 phpBB Group