This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Log all traffic for an IP

I would like to log all traffic generated from one particular IP on the LAN and we are using NAT for all internet traffic.We don't have any license for content filter,is there any possibility to monitor the traffic through this single IP or should we better move to some other firewall which has this basic feature without additional license cost.

This thread was automatically locked due to age.

Parents

0 BAlfson over 16 years ago

Please be a little more specific about this question. What are you trying to prove?
Cancel
Vote Up 0 Vote Down

Cancel
0 preet over 16 years ago in reply to BAlfson

To be more specific

NAT Rule
Internal Network(LAN)----------->External(Public IP)
192.168.10.0

The LAN with private IP are Nate'd to use the single Public IP.
I would like to log all traffic passing through the firewall for a private IP 192.168.10.10,is this possible?

The Packet filter log only shows the dropped traffic.
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 preet over 16 years ago in reply to BAlfson

To be more specific

NAT Rule
Internal Network(LAN)----------->External(Public IP)
192.168.10.0

The LAN with private IP are Nate'd to use the single Public IP.
I would like to log all traffic passing through the firewall for a private IP 192.168.10.10,is this possible?

The Packet filter log only shows the dropped traffic.
Cancel
Vote Up 0 Vote Down

Cancel

Children

0 BAlfson over 16 years ago in reply to preet

Experiment with packet filter rules and logging traffic.
Cancel
Vote Up 0 Vote Down

Cancel
0 RFCat_vk_01 over 16 years ago in reply to BAlfson

Hi,
a bit of a hint. Being a home user you won't have many active IPs so you could create a packet filter for each IP and choose which one you want to log.

Ian M
Cancel
Vote Up 0 Vote Down

Cancel
0 AngeloC over 16 years ago in reply to RFCat_vk_01

Hi preet,

When you build packet filter rules, the default is to log only dropped traffic yes. However when building your own rules, you can indicate the "log" checkbox which will also log allowed traffic as well. This way, you can make a rule to/from the IP you wish to track, and enable logging for these rules, and you will get your required records.
Cancel
Vote Up 0 Vote Down

Cancel