• ton80
  • New member
  • Offline
  • Registered: 2007-11-18
  • Posts: 2

Topic: tracking WiFi client interenet traffic

Hi all,

We have setup Chillispot + Freeradius + Mysql sucessfully. WiFi clients are able to connect to internet after authenticated by the radius server through chillispot. Is there any way that the Mysql server can track down all web site each WiFi client has visited by their individual IP addresses? Thanks in advanced.

  • Registered: 2007-10-30
  • Posts: 6

Re: tracking WiFi client interenet traffic

I use text log with tcpdump:

vi /etc/rc.local
tcpdump '(src net 192.168) and (tcp dst port 80 or dst port 443) and (tcp[tcpflags] & tcp-syn != 0)' -tttt -i eth1 -q -l >> /var/log/wifi/wifi-access.log &

But consider disk usage...

  • ton80
  • New member
  • Offline
  • Registered: 2007-11-18
  • Posts: 2

Re: tracking WiFi client interenet traffic

thanks barret, I tried and it works. but is it possible to record the similar information into the mysql server?

  • Registered: 2007-10-30
  • Posts: 6

Re: tracking WiFi client interenet traffic

This is a quick solution.
All is possible in many ways.
You can do this in php,perl,ecc....
As source you can take tcpdump output...

  • Registered: 2007-12-06
  • Posts: 1

Re: tracking WiFi client interenet traffic

I've done it using squid:
$IPTABLES -t nat -A PREROUTING -i $WIFI -p tcp --dport 80 -s! 192.168.10.10 -j REDIRECT --to-port 3128

All connection not to port 80 are logged via iptables:
$IPTABLES -t nat -A PREROUTING -m state --state NEW,INVALID -d! 192.168.10.0/29 -p tcp --dport ! 80 -j LOG --log-prefix "iptables:"

$WIFI is your wifi network interface