Using hardware routers SOHO for network traffic
accounting with TMeter
|
 It is frequently used a solution for
Internet Connection Sharing based on hardware routers SOHO (Small
Office / Home Office). As rule, such routers (for example, Asus
WL-500, Netgear WNR-3500 and etc) are running on Linux-based
firmware. The firmware has daemons that allows to send network
statistic via Netflow protocol to
TMeter.
Generally, the stock firmware doesn't have
Netflow-related features and you should install third-party (as
rule, open-source) firmware. Installing third-party firmware
doesn't break router guarantee.
|
Firmware DD-WRT includes an implementation of Netflow v.5
called RFlow. You can see an example of configuring RFlow on the
figure below (192.168.1.4 is IP address of PC running TMeter).
How to configure TMeter for remote collection a
network statistic using RFlow (Netflow) ?
First, you must select for traffic capturing a network
interface Cisco Netflow Collector Protocol v.5 (see figure)
Further actions will depend on your network
configuration. For example, your network looks like:
If you want to count the network traffic of PC-1, PC-2
and PC-3, you should fill Local Address Table (LAT) by range
192.168.1.1-192.168.1.255 and create three filters (one filter for
each PC).
| Filter 1. Internet traffic of PC
192.168.1.101. |
| Rule N |
IP
protocol |
Source
address |
Source
port |
Destination
address |
Destination
port |
Both
directions |
Packet
action |
| 1 |
Any |
192.168.1.101 |
|
IP addresses of WAN |
|
Yes |
Count |
| Filter 2. Internet traffic of PC
192.168.1.102. |
| Rule N |
IP
protocol |
Source
address |
Source
port |
Destination
address |
Destination
port |
Both
directions |
Packet
action |
| 1 |
Any |
192.168.1.102 |
|
IP addresses of WAN |
|
Yes |
Count |
| Filter 3. Internet traffic of PC
192.168.1.103. |
| Rule N |
IP
protocol |
Source
address |
Source
port |
Destination
address |
Destination
port |
Both
directions |
Packet
action |
| 1 |
Any |
192.168.1.103 |
|
IP addresses of WAN |
|
Yes |
Count |