search

ntop / ntopng

Web-based Traffic and Security Network Traffic Monitoring
http://www.ntop.org
GNU General Public License v3.0
6.25k stars 656 forks source link

VPN traffic correlation with Fritzbox #3973

Closed khoshtip2 closed 4 years ago

khoshtip2 commented 4 years ago

we have some vpn-user who works from outside via vpntracker app (mac) and connect with file server. how can we check the vpn-traffic from vpntracker app (ip-sec) on the network? Link: https://www.vpntracker.com/de/index.html

is there a "plugin" specifically for VPN or VOIP users?

best regards Shahram

cardigliano commented 4 years ago

@khoshtip2 could you provide more details about the topology? Do you have a VPN firewall/concentrator? Or the user is connecting to a VPN server running on the file server?

khoshtip2 commented 4 years ago

Hi, We have avm fritzbox as Router and VPN Server. Remote User Connect to Fritzbox. The Apple fileserver and 3CX Server are local, behind the Fritzbox.

Best regstes SH

khoshtip2 commented 4 years ago

network.pdf the VPN remote clients are not listed.

cardigliano commented 4 years ago

@khoshtip2 could you check if:

  1. there is a way to configure a syslog server in your Frizbox router
  2. the logs contain user login/logout events with the assigned IP, in order to propagate that information to ntopng and tag the traffic (we have a similar integration with other VPN firewalls in ntopng), and in that case send us an example I see that there is some similar request: https://github.com/mcktr/check_tr64_fritz/issues/41
cardigliano commented 4 years ago

@khoshtip2 were you able to check the ability to export syslog in your Fritzbox?

cardigliano commented 4 years ago

Closing this for the time being, please reopen if still required