Àíàëèç òðàôèêà íà wl500gP

188.xx.x.55:53165 [30/04/10:00:31:46] 0.0.0.0 0.0.0.0:0 0.0.0.0 "UDPMAP 0.0.0.0:0" 00000 in:257028 out:38273 SOCK5/195.98.174.30:27015
Ïîëó÷èëîñü! Îêàçûâàåòñÿ ðîóòåð äðîïàë âõîäÿùèå UDP ñîåäèíåíèÿ ñ ìîåãî âíåøíåãî IP(188.xx.x.55).
SocksCap íàïðèìåð èñïîëüçóåò UDP-ïîðòû ñ íîìåðîì îò 1000 äî 3000 (ðàíäîìíî), è ïèõàåò òóäà òðàôèê êîòîðûé èäåò îò ìîåãî ip ê ip ïðîêñè.
Ñäåëàë òàê:
iptables -I INPUT -p udp --dport 1000:3000 -j ACCEPT

Ýòî õîðîøî ÷òî ÿ ìîãó îòêðûâàòü çàêðûâàòü ó ñåáÿ ÷òî õî÷ó, à äðóãèå êàê?
Ãåìîð ñ ýòèì UDP, îäíàêî.

Âñåì ñïàñèáî çà ñîâåòû :)

Ïðèÿòíî âñïîìíèòü ìîëîäîñòü.... à ðåøåíèå îêàçàëîñü ïðîñòûì... web-èíòåðôåéñ êëàä¸òñÿ íà ñàìóþ äàëüíþþ ïîëî÷êó, à âìåñòî íåãî áåð¸òñÿ ssh è ìàíóàë ïî Linux...

p.s. è òîãäà âñ¸ äåéñòâèòåëüíî ïðîñòî =)

õì... íà ìàäåìå ñòàâèì ip 192.168.2.1
ó þçâåðåé 192.168.0.õõõ ãåéò 192.168.0.1
â ðîóòåð âõîäèò äâà êàáåëÿ èç ëîêàëüíîé ñåòêè íà wan ïèøåì ãåéòîì 192.168.2.1
à ip ÷åðåç êîòîðûé áóäóò âñå õîäèòü 192.168.0.1


çû â ïðèíöèïå íèêàêèõ ïðîáëåì íå áóäåò åñëè ìîìåäó äàòü ip 192.168.0.2
íà wan ðîóòåðà ñòàâèì ip 192.168.0.3 è çàâîäèì ãåéò íà ìîìåä
ip äëÿ lan 192.168.0.1

íà êëèåíòàõ ãåéò 192.168.0.1
Ðàáîòàåò è â òàêèõ êîíôèãàõ

Ïîèñê êóðèë, ãóãëèë, íî îòâåòà íå íàøåë.

Èòàê, ïîñòàâèë è íàñòðîèë Nshaper è â ñòàòèñòèêå óâèäåë, ÷òî òðàôèê Lazy, äàæå ïðè îòñóòñòâóþùåé ñåòåâîé àêòèâíîñòè åäèíñòâåííîãî êîìïà, äàæå ñðàçó ïîñëå ïåðåçàãðóçêè ðóòåðà 1,7 ìåãàáèò (!).

PHP Code:

---

Loading...
  nShaper status                                 Sat Jun  5 23:03:07 MSD 2010
                                                               Ctrl-C to exit
  -Zones-     -Download rate-   -Received-        -Upload rate-       -Sent-
               bit/s     pps        Bytes         bit/s     pps        Bytes
Total          1.77M     168         129M           296       0         140k
  inet         1.77M     168         129M           296       0         140k
    Crit          48       0        20.8k             0       0        4.66k
    Prio           0       0            0             0       0            0
    Web          184       0         126k           216       0         127k
    Other         40       0        5.95k            32       0        4.63k
    Lazy       1.77M     167         129M            56       0        3.44k
  cn               0       0            0             0       0            0
                   0       0            0             0       0            0
                   0       0            0             0       0            0 


---

Óäàëîñü óñòàíîâèòü, ÷òî, ïîõîæå, âèíîé ýòîìó àäñêàÿ àêòèâíîñòü ïðîòîêîëà RAW (êàðòèíêà ÷åðåç ìèíóòó ïîñëå ïåðåçàãðóçêè ìàðøðóòèçàòîðà, ïî îñòàëüíûì ïðîòîêîëàì, ôàêòè÷åñêè ïî íóëÿì):

PHP Code:

---

$ netstat -a -w
Active Internet connections (servers and established)
Proto Recv-Q Send-Q Local Address           Foreign Address         State
raw   108528      0 0.0.0.0:2               0.0.0.0:*               2
raw        0      0 0.0.0.0:2               0.0.0.0:*               2 


---

Òàêæå, âñå âðåìÿ áûñòðî ìîãðàåò, ïðàêòè÷åñêè ãîðèò èíäèêàòîð WAN.

×òî ýòî âñå òàêîå è ÷òî ñ ýòèì äåëàòü? Âñåì ñïàñèáî!









[/PHP]

Ïðîòîêîë 2 - ýòî IGMP (ìîæåò áûòü ñâÿçàíî ñ IPTV è ïðî÷èì ìóëüòèêàñòîì).

multicast ìîæåò áûòü?

Îòêëþ÷èë âåçäå â âåá-ìîðäå ìóëüòèêàñò è âðîäå ïîìîãëî:)
Ïðîäîëæàþ íàáëþäåíèå! Ñïàñèáî!

Ïèøó íåìíîãî íåîáû÷íûé øåéïåð, ïîìèìî îáû÷íûõ ip-ïàêåòîâ, â òðàôèêå ïðèñóòñòâóþò PPPoE-êàäðû... õîòåëîñü áû âûíåñòè èõ â îòäåëüíûõ htb êëàññ, âîò òîëüêî êàê:?

Ïðîñòåéøèé âàðèàíò ïðèõîäÿùèé â ãîëîâó:

Code:

---

PPPOE1="protocol 0x8863"
PPPOE2="protocol 0x8864"

tc filter add dev $DEV_OUT $PPPOE1 prio 501 u32 flowid 1:500
tc filter add dev $DEV_OUT $PPPOE2 prio 501 u32 flowid 1:500

---

íî ñ ó÷¸òîì òîãî, ÷òî óæå èñïîëüçóþòñÿ ôèëüòðû ñ handle..fw, tc ñòðàøíî ðóãàåòñÿ, è ÷òî äåëàòü ÿ íå çíàþ. Ñïàñèáî çà ëþáûå òîëêîâûå ïðåäëîæåíèÿ è ñîâåòû...

Íîãàìè òîê íå áåéòå)))
Ìîæíî ëè ñ ïîìîùüþ äàííîãî ðîóòåðà îòñëåäèòü êòî è êóäà èç âíóòðåííåé ñåòêè ïî èíåòó ïîëçàë? åñëè äà, ïîäñêàæèòå ïîæàëóéñòà êàêèå íàñòðîéêè äëÿ ýòîãî íóæíû...

Åñòü ðîóòåð Asus WL-500g Premium v2
Ìíå õî÷åòñÿ ïîñëåäèòü çà òðàôèêîì êîìïüþòåðîâ, êîòîðûå ïîäêëþ÷àþòñÿ ïî WiFi ê ìîåìó ðîóòåðó.
Ýòî âîçìîæíî? ×òî äëÿ ýòîãî íóæíî ñäåëàòü?
Èëè ìîæåò åù¸ ÷òî ìîæíî ñäåëàòü, ÷òî áû óçíàòü ïî ïîäðîáíåå î ïîäêëþ÷àåìûõ êîìïüþòåðàõ?

Óâàæàåìûå ãóðó, à ïûòàëñÿ êòî-òî ðåøèòü âîïðîñ ïîäñ÷åòà âõîäÿùåãî\èñõîäÿùåãî òðàôèêà ïî ppp?

Quote:

---

Originally Posted by tigroff

à ïûòàëñÿ êòî-òî ðåøèòü âîïðîñ ïîäñ÷åòà âõîäÿùåãî\èñõîäÿùåãî òðàôèêà ïî ppp?

---

vnstat è âåá-ìîðäà ê íåìó. Íà ôîðóìå åñòü îòäåëüíàÿ òåìà.

äîáàâëþ. è äåëàòü äèñêîííåêò ïî íåêîåìó ëèìèòó.
ãðàôèêè íå èíòåðåñóþò. çà ëèìèò âûõîäèòü áîëüíî êîøåëüêó...
ïîêà ðîäèëîñü òàêîå íåïðîâåðåííîå:

â post-firewall.

iptables -N ACCT_IN_PPP
iptables -N ACCT_OUT_PPP

iptables -A ACCT_IN_PPP -j ACCEPT
iptables -A ACCT_OUT_PPP -j ACCEPT

iptables -I INPUT -i ppp0 -j ACCT_IN_PPP
iptables -I FORWARD -i ppp0 -j ACCT_IN_PPP
iptables -I FORWARD -o ppp0 -j ACCT_OUT_PPP
iptables -I OUTPUT -o ppp0 -j ACCT_OUT_PPP

â êðîíå 5 ìèíóò

let TOT=`iptables -L ACCT_OUT_PPP -vnx | awk '/^ *[0-9]+ *[0-9]+.*/{print $2; exit}'`+`iptables -L ACCT_IN_PPP -vnx | awk '/^ *[0-9]+ *[0-9]+.*/{print $2; exit}'`
if [ TOT -gt 1000000000 ]
then
killall pppd
fi

ïëþñ ïîäíÿòèå pppd â 0:00 è îáíóëåíèå ñ÷åò÷èêîâ

À ìîæíî ñäåëàòü, ÷òî áû â ëîãàõ ïèñàëîñü, êòî è êîãäà ïûòàëñÿ ïîäêëþ÷èòüñÿ ê ðîóòåðó ïî wi-fi è ðåçóëüòàò ýòèõ ïîïûòîê?