Monitor Wireless Home Network

Pat67

Reputable
Sep 26, 2014
4
0
4,510
Good day,

I want to monitor the traffic on my Wireless Home Network.
Monitoring of the following:
- data up/download of each user
- what content/website by each user

Hardware:
- Netgear DGN2200
- Windows Laptops
- Android Phones/Tablets

Nice to have:
- Limit data and websites (i.e. parental control) of certain MAC Addresses or users
- Possibility to manually stop certain actions

Thanks in advance for your time and advise.
 

Pat67

Reputable
Sep 26, 2014
4
0
4,510
Thank you Paul, I appreciate your feedback.
The router has parental control, but it goes for every user which inconveniences 3 users for the sake of 1 who needs to be controlled.
I will check Wireshark and Networx.
 
Your problem is not the software tool it is getting to the data. To directly capture and decode encrypted wireless traffic even when you have the keys is a huge undertaking. Microsoft disables any ability to run wireless cards in promiscuous mode as though that is going to stop hackers so you need to run under linux. And this still only captures the wireless.

Now if you happen to have a cable modem separate from the router you can place a dual nic machine or tap at that point and capture all the data being send to the internet. Problem is the data has been natted by this time so you can't actually determine which machine on the inside is doing it. One way around this is to use the QoS and mark the traffic based on internal ip address. This will only get you the outbound traffic the inbound marking is controlled by the server the device is talking to and the ISP remove all packet marking anyway. It is possible though to match up the incoming and outgoing sessions with a program.

The only real way to do this is to have the router do it for you. You of course could use a machine acting as a firewall to do both the monitoring of the traffic and the router/nat function. You would then use some router configured as AP to get the wireless ability in your house.

You can also look at loading dd-wrt on the router and using its version of netflow. You will still need a external machine to collect the netflow data and analyze it but you will not have to place a different device in the path.
 


This is just another of the many traffic monitoring tools that you run on client machines. Like all software like this it can't monitor machines it is not installed on and like most these tools they do not run on phone or tablets.

You need to read these threads. The problem is not the software it is getting to the data. You must somehow get between a encrypted wireless session and the internet which tends to be impossible in a home users install where there is a single device providing the wireless,router and modem.
 

Pat67

Reputable
Sep 26, 2014
4
0
4,510
Thank you all for your replies and suggestions.
In the meanwhile I researched this challenging task a bit further and came to the conclusion that I just keep on checking the teenagers phones/tablets/laptops.
And if they delete the history the device(s) get taken away for a period of time.
Seems to be the simplest approach. ;-)