Computer lessons

Internet traffic tracking program. How to track traffic on the network

Traffic monitoring in corporate networks is needed for the following purposes:

1. Identifying those who clog the channel and prevent you from using the Internet on other computers. This is especially true in organizations with low speed access to the World Wide Web. As a rule, torrents, video hosting sites, etc. become the source of the problem. Detection of their owners does not necessarily entail punishment, because often the users themselves do not know that something is being downloaded on their computer in the background (for example, the computer may be infected with a virus and included in a hacker network for cryptocurrency mining).

2. Catching employees doing things at work that are far from their official duties. The manager can punish for this, especially since there will be evidence of visiting harmful sites.

3. Protecting corporate computers from viruses and other garbage that can be caught on dubious sites.

4. Traffic accounting where the tariff is calculated according to the traffic meter (especially relevant with limited Internet access - for example, using cellular operators).

Does your corporate network already have an Internet traffic monitoring program?
Check how effectively it works.


How the Traffic Inspector program solves the problem of monitoring Internet traffic

Traffic Inspector FSTEC - solution for government agencies

From the country's top leadership, including V.V. Putin, there is an initiative to strengthen the personal responsibility of heads of government agencies for ensuring information security (). First of all, this concerns the laws “On Personal Data” (152-FZ) and “On the Protection of Children” (436-FZ).

Traffic Inspector FSTEC has a FSTEC certificate, which allows it to be used in government agencies: schools and other educational institutions, libraries, etc. Its capabilities are successfully used to restrict Internet access for children and adolescents.

There are a lot of programs for tracking traffic on a local network: both paid and free, differing greatly in functionality. One of the most popular Open Source programs is SAMS. It runs on the Linux platform in conjunction with Squid.

SAMS requires PHP5, we will use Ubuntu Server 14.04. We will need Squid, Apache2, PHP5 packages with modules.

Accounting Internet traffic on a local network Linux

Let's try to figure out how it works.

Squid distributes the Internet, accepting requests on port 3128. At the same time, it writes a detailed log access.log. All control is carried out through the squid.conf file. Squid has extensive capabilities for managing access to the Internet: limiting access by address, controlling bandwidth for specific addresses, groups of addresses and networks.

SAMS works based on analysis of Squid proxy server logs. The local network traffic accounting system monitors the proxy server statistics and, in accordance with the specified policies, makes a decision to block, unblock or limit the speed for the Squid client.

Installing SAMS

Installing packages.

apt-get install apache2 php5 php5-mysql mysql-server php5-gd squid3

Download and install SAMS

wget https://github.com/inhab-magnus/sams2-deb/archive/master.zip

unzip master.zip

cd sams2-deb-master/

dpkg -i sams2_2.0.0-1.1_amd64.deb

Installing the web interface

dpkg -i apache2/sams2-web_2.0.0-1.1_all.deb

We make changes to the /etc/sams2.conf file.

DB_PASSWORD=/MySql password/

Launching SAMS

service sams2 start

Setting up Squid

We make changes to the /etc/squid3/squid.conf file

http_port 192.168.0.110:3128
cache_dir ufs /var/spool/squid3 2048 16 256

We enable logging and log rotation with storage for 31 days.

access_log daemon:/var/log/squid3/access.log squid

logfile_rotate 31

Stop Squid, create a cache.

service squid3 stop

service squid3 start

For the purity of the experiment, we configure one of the browsers to work with proxy 192.168.0.110 via port 3128. Having tried to connect, we receive a connection refusal - Squid does not have proxy access rights configured.

Initial SAMS setup

In another browser, open the address (192.168.0.110 – server address).

http://192.168.0.110/sams2

He will tell us that he cannot connect to the database and will offer to perform the installation.

We specify the database server (127.0.0.1), login and password for MySql.

The initial setup of the traffic accounting system has been completed. All that remains is to configure the program.

Local network traffic monitoring

Login to the system as administrator (admin/qwerty).

It’s worth mentioning right away about user authorization.

In the Squid branch, open the proxy server and click the “Configure proxy server” button at the bottom.

The most important thing here is to indicate your IP address in the addresses of folders and files where necessary, otherwise the proxy server will not start.

The essence of all changes to SAMS settings is that they are written to squid.conf. Sams2deamon runs in the background, which monitors changes in settings that require entry into the configuration file (you can also set the tracking interval there).

Fill in the “User” and “IP address” fields. Let's take the same IP as the username (the IP of the computer, not the server!). In the “Allowed traffic” field we enter “0”, that is, without restrictions. We omit all other fields.

A new acl will be added for this IP address and permission to work through Squid. If the config has not been changed automatically, go to the proxy branch and click the “Reconfigure Squid” button. Changes to the config will be made manually.

We try to open any URL in the browser. We check access.log and see requests processed by the proxy. To check the operation of SAMS, open the “Users” page and click the “Recalculate user traffic” button at the bottom.

Using the buttons below for managing statistics, you can obtain detailed information on the statistics of user visits to pages.

Cellular operators often offer Internet traffic in the form of a package with a fixed amount of data. After the package MBs are exhausted, you need to purchase additional traffic. This usually happens automatically and at inflated prices. Therefore, in order to avoid such an unpleasant situation, it is rational to limit traffic consumption in order to stretch the allocated data package for a given period - a week or a month.

Android OS allows you to view traffic consumption statistics and set a limit. At the same time, the standard capabilities do not stand out in terms of functionality. Therefore, it is rational to use appropriate programs that can record traffic consumption by applications, as well as set limits on data consumption.

The program allows you to control traffic consumption on the Internet and applications, as well as set a consumption limit. Installation requires Android 4.0 or higher. There are no ads or in-app purchases. Maximum RAM consumption is 229 MB.

The utility automatically calculates traffic consumption in applications and signals when the specified limit is reached. If, according to the terms of the tariff plan, a fixed data package is allocated, you need to specify the volume, plan type, repetition cycle and start date. In addition to recording traffic consumption, My Data Manager calculates the consumption of minutes and messages.

The home screen contains 3 tabs for monitoring traffic consumption: mobile, Wi-Fi and roaming. The hidden panel on the left provides access to additional options:

Total traffic costs.

  • Log – view consumption statistics by day.
  • Map – display of used data on the ground.
  • Applications - the amount of traffic spent by games and programs - per hour, day, week or month.
  • Tariff plans – tracking and regulation of traffic costs according to a given tariff.
  • Notifications – warnings about the limit used or reached.

The settings allow you to change the light design to a dark one, use constant notifications about the amount of traffic spent, and display a widget with consumption in the status bar. The application also allows you to store a history of traffic consumption, permanently or for a certain period.

Main advantages:

  1. Free, no ads or in-app purchases.
  2. Monitoring the consumption of mobile traffic, Wi-Fi or roaming.
  3. View the traffic used by applications for a specific period.
  4. Setting a limit for Internet, messages or minutes.
  5. Individual traffic counting and regular, according to the tariff plan.
  6. Fine-tuning the alert.
  7. History storage.
  8. Switch to dark design.
  9. Correct localization.

Main disadvantages:

  1. Not found.

The application measures Internet traffic consumption and sets a consumption limit. Disabling advertising, activating the widget and displaying traffic consumption in the status bar will cost 2 USD. At the same time, it is possible to purchase three functions for 5 USD, as well as short-term receipt of premium privileges for installing partner programs and viewing advertisements. The minimum Android version for installation is 4.1. Maximum RAM consumption up to 328 MB.

When you first launch the application, you are prompted to set a traffic limit for a month, a week, per day and/or 3 days. Also indicate the amount of data used for correct calculation.

The home page is divided into two tabs - with general information about consumed traffic and with application consumption.

The first tab allows you to review statistics for previous periods of Internet use - yesterday, this week, month, etc. View the total consumption of mobile and Wi-Fi connections, the used mobile traffic limit: by hour, in the form of a graph and diagram.

The second tab displays detailed traffic consumption by applications. When you click on a program from the list, the amount of outgoing and incoming traffic is displayed. Hourly statistics for previous days are also available.

In the settings, limits and additional traffic limitation parameters are set. There is also a choice of dark design, display of consumption in the status bar and disabling Wi-Fi statistics in the graph of the first tab.

Main advantages:

  1. Monitoring mobile traffic and Wi-Fi consumption.
  2. View hourly statistics and for previous periods.
  3. Setting a traffic limit for a month, week or day.
  4. Fine-tuning the alert.
  5. Dark theme support.

Main disadvantages:

  1. Availability of switchable advertising.
  2. Some features require purchase.
  3. There is a lack of translation in some places.

3G Watchdog – Data Usage

DOWNLOAD FOR FREE

Program for tracking and limiting traffic. Declared support for Android devices version 2.2 and higher. There are no ads, but some features are available after purchasing the PRO version for 1 USD. The maximum amount of RAM usage is 147 MB.

When you first launch it, along with the welcome message, the application asks you to set a traffic consumption quota according to your tariff plan or available volume. You can also set a warning when the limit mark is reached and select your preferred settings.

The main page contains information about used/available mobile traffic and the remaining time until the quota expires. Presentation of statistics in the form of a custom histogram, text with % and table. The latter allows you to view the amount of transmitted, received and total data for today/week/month and compare it with a given plan. Moreover, the table records mobile traffic, via Wi-Fi and in roaming. Where a separate traffic consumption quota is set for each section.

Below is the app traffic count. Starting with Android 7.0, 3G Watchdog counting must be enabled for the feature to work. To do this, you need to activate the corresponding switch in the security settings. After that, statistics will appear showing the amount of traffic consumed by applications and the time of activity.

Other features of 3G Watchdog include displaying traffic consumption in real time. At a specified interval, the program records received and transmitted data. Presentation of information in the form of a graph and list.

Settings allow you to set the display of information on the main page, status bar and widget. Also set the data update interval.

Interface of the “3G Watchdog – Data Usage” application.

Main advantages:

  1. Support Android 2.2 and higher.
  2. No advertising.
  3. Tracking mobile traffic consumption, Wi-Fi and roaming.
  4. View history.
  5. Display traffic consumption in real time.
  6. Backup and recovery.
  7. Setting a limit for the consumption of mobile traffic, Wi-Fi and roaming.
  8. Setting up an alert.
  9. Dark design.

Main disadvantages:

  1. There is a lack of translation in some places.
  2. Some functions are available in the Pro version.
  3. The application design has not changed since Android 2.2.
  4. You cannot add exceptions where there is free traffic.
  5. There is an error in traffic calculation; conflicts with other programs are possible.

The application combines traffic limiting and VPN functions. There are no ads or in-app purchases. Installation requires Android version 4.1 or higher. RAM usage up to 150 MB.

The main screen contains general information about the traffic used for the day. The VPN is immediately activated, and the window occupies 60% of the usable area. Below is a list of applications that displays used traffic and recommendations for saving.

When opening a program from the list, three options for using the data are offered:

Prevent data waste by limiting background work.

Launch the application only when connected to a Wi-Fi network.

Setting a data usage limit, upon reaching which a corresponding notification will appear. Available values ​​are 10, 25, 50 and 100 MB.

The application has no settings. The VPN automatically selects the country; most likely, there are no traffic limits.

Main advantages:

  1. No advertising.
  2. Built-in VPN.
  3. Ease of presentation of information.
  4. Limiting or disabling application traffic.

Main disadvantages:

  1. Due to insufficient optimization, the application freezes on flagship smartphones.
  2. Limiting mobile application traffic to 10, 25, 50 and 100 MB only.
  3. You cannot set a limit for Wi-Fi networks or applications with free traffic.
  4. No useful settings.
  5. Irrational distribution of work space.

The program allows you to control and limit mobile application traffic. There are no ads or in-app purchases. The required Android version for installation is 5.0 or higher. The amount of RAM used is up to 149 MB.

The main screen displays the amount of traffic used per day. Contains a switch for saving traffic, buttons for statistics of data used and nearby Wi-Fi access points.

Statistical information is presented in a convenient form – a graph. You can also view activity for previous periods of use - this week and this month. Below is a list of installed applications, where traffic restriction can be turned on and off with one touch.

Notify when there are available Wi-Fi networks nearby.

Display traffic consumption in real time.

Main advantages:

  1. Ease of use.
  2. No ads or in-app purchases.
  3. Simple presentation of information and statistics.
  4. Automatic and manual search for nearby places with Wi-Fi hotspots.
  5. Limit mobile traffic in one touch.
  6. View traffic consumption in real time.

Main disadvantages:

  1. Few useful settings.
  2. You cannot set traffic restrictions according to the volume of the tariff plan.
  3. The application only supports English.

DOWNLOAD FOR FREE

The application tracks mobile Internet usage and Wi-Fi activity. It is free to download and does not contain ads, but includes paid themes for 1 USD. The program requires Android version no lower than 4.4. RAM consumption is on average 77 MB.

GlassWire automatically counts your mobile and wireless connection usage. The user has access to information about the amount of data received and transmitted, in real time or when viewing consumption for previous periods. If the tariff plan has a fixed amount of free traffic, then specifying the details will allow the application to track consumption and report on limits reached. Moreover, the mobile plan, Wi-Fi network and exceptions to applications with free traffic are taken into account.

The main sections of the application are located in the hidden panel on the left:

  • Schedule. Shows traffic usage by apps, in real time and over previous sessions. It also allows you to view information about applications and quickly turn off background activity.
  • Statistics. Displays the amount of data received and transmitted.
  • Tariff plan. Setting limits on packet traffic provided by the operator.
  • Alerts. Reports application activity, and also allows you to set up warnings when traffic limits are reached or exceeded.
  • Themes. Changes the design of the application. There are 7 skins available, including 3 paid ones.

The settings contain options for changing alerts, notification type, design, language, and information update interval. Also clearing history.

Main advantages:

  1. Nice design in Material style.
  2. Simple and accessible presentation of information.
  3. No advertising, correct localization.
  4. Availability of statistics, real-time consumption, amount of transmitted and received data.
  5. Change the graphic design, fine-tune alerts and set the update interval.
  6. Recording the use of mobile traffic and Wi-Fi networks.
  7. Setting limits for tariff plans, including Wi-Fi network and applications with free traffic.

Main disadvantages:

  1. There is no built-in Internet blocking for applications and services.
  2. Paid themes.

Conclusion

The My Data Manager application is the best choice for monitoring and limiting traffic due to its flexible settings. In addition, the program is free and does not contain annoying ads.

The Traffic monitor utility is interesting for its convenient presentation of statistics, so it is suitable for novice users. At the same time, the poor color scheme in combination with advertising forces you to use another similar program.

3G Watchdog is not inferior in functionality to My Data Manager, offers a convenient presentation of statistics and does not contain advertising. At the same time, the application has quite a few shortcomings - lack of translation in places, no exceptions for applications with free traffic, outdated design and errors in calculations. As a result, it's easy to be left without Internet at the wrong time or incur additional costs for overuse.

The Data Saver program is interesting due to its free VPN, no advertising, and the function that prevents applications from using a mobile connection instead of Wi-Fi. At the same time, the program does not use workspace rationally. And the lack of optimization causes the program to freeze and drains the battery right before your eyes.

Datally shows the amount of traffic consumed in a simple and visual form. And activating just one switch will completely limit the transfer of data or specific applications, which is convenient for beginners. Also, this will not be a hindrance for users who do not know the language. However, the program does not support automatic traffic limitation if the tariff plan includes a package of free megabytes.

GlassWire is a convenient application for tracking traffic consumption and setting limits. Information and statistics are presented in an understandable form, which complements the pleasant interface and the absence of advertising. One of the minor drawbacks is that there is no built-in function to force Internet shutdown for selected programs.

11 ratings, average: 3,55 out of 5)

Many network administrators often encounter problems that can be resolved by analyzing network traffic. And here we come across such a concept as a traffic analyzer. So what is it?

NetFlow analyzers and collectors are tools that help you monitor and analyze network traffic data. Network process analyzers allow you to accurately identify devices that are reducing channel throughput. They know how to find problem areas in your system and improve the overall efficiency of the network.

The term " NetFlow" refers to a Cisco protocol designed to collect IP traffic information and monitor network traffic. NetFlow has been adopted as the standard protocol for streaming technologies.

NetFlow software collects and analyzes flow data generated by routers and presents it in a user-friendly format.

Several other network equipment vendors have their own protocols for monitoring and data collection. For example, Juniper, another highly respected network device vendor, calls its protocol " J-Flow". HP and Fortinet use the term " s-Flow". Although the protocols are called differently, they all work in a similar way. In this article, we'll look at 10 free network traffic analyzers and NetFlow collectors for Windows.

SolarWinds Real-Time NetFlow Traffic Analyzer

Free NetFlow Traffic Analyzer is one of the most popular tools available for free download. It gives you the ability to sort, tag, and display data in a variety of ways. This allows you to conveniently visualize and analyze network traffic. The tool is great for monitoring network traffic by type and time period. As well as running tests to determine how much traffic various applications consume.

This free tool is limited to one NetFlow monitoring interface and only stores 60 minutes of data. This Netflow analyzer is a powerful tool that is worth using.

Colasoft Capsa Free

This free LAN traffic analyzer identifies and monitors over 300 network protocols and allows you to create custom reports. It includes email monitoring and sequence charts TCP synchronization, all of this is collected in one customizable panel.

Other features include network security analysis. For example, tracking DoS/DDoS attacks, worm activity and ARP attack detection. As well as packet decoding and information display, statistical data about each host on the network, packet exchange control and flow reconstruction. Capsa Free supports all 32-bit and 64-bit versions of Windows XP.

Minimum system requirements for installation: 2 GB of RAM and a 2.8 GHz processor. You must also have an Ethernet connection to the Internet ( NDIS 3 compliant or higher), Fast Ethernet or Gigabit with mixed mode driver. It allows you to passively capture all packets transmitted over an Ethernet cable.

Angry IP Scanner

It is an open source Windows traffic analyzer that is fast and easy to use. It does not require installation and can be used on Linux, Windows and Mac OSX. This tool works by simply pinging each IP address and can determine MAC addresses, scan ports, provide NetBIOS information, determine the authorized user on Windows systems, discover web servers, and much more. Its capabilities are expanded using Java plugins. Scan data can be saved to CSV, TXT, XML files.

ManageEngine NetFlow Analyzer Professional

A fully featured version of ManageEngines' NetFlow software. This is a powerful software with a full set of functions for analysis and data collection: monitoring of channel throughput in real time and alerts when threshold values ​​are reached, which allows you to quickly administer processes. In addition, it provides summary data on resource usage, monitoring of applications and protocols, and much more.

The free version of the Linux traffic analyzer allows unlimited use of the product for 30 days, after which you can monitor only two interfaces. System requirements for NetFlow Analyzer ManageEngine depend on the flow rate. Recommended requirements for a minimum flow rate of 0 to 3000 threads per second are a 2.4 GHz dual-core processor, 2 GB of RAM, and 250 GB of available hard drive space. As the speed of the flow to be monitored increases, the requirements also increase.

The Dude

This application is a popular network monitor developed by MikroTik. It automatically scans all devices and recreates a network map. The Dude monitors servers running on various devices and alerts you if problems arise. Other features include automatic discovery and display of new devices, the ability to create custom maps, access to tools for remote device management, and more. It runs on Windows, Linux Wine and MacOS Darwine.

JDSU Network Analyzer Fast Ethernet

This traffic analyzer program allows you to quickly collect and view network data. The tool provides the ability to view registered users, determine the level of network bandwidth usage by individual devices, and quickly find and fix errors. And also capture data in real time and analyze it.

The application supports the creation of highly detailed graphs and tables that allow administrators to monitor traffic anomalies, filter data to sift through large volumes of data, and much more. This tool for entry-level professionals, as well as experienced administrators, allows you to take complete control of your network.

Plixer Scrutinizer

This network traffic analyzer allows you to collect and comprehensively analyze network traffic, and quickly find and fix errors. With Scrutinizer, you can sort your data in a variety of ways, including by time interval, host, application, protocol, and more. The free version allows you to control an unlimited number of interfaces and store data for 24 hours of activity.

Wireshark

Wireshark is a powerful network analyzer that can run on Linux, Windows, MacOS X, Solaris and other platforms. Wireshark allows you to view captured data using a GUI, or use the TTY-mode TShark utilities. Its features include VoIP traffic collection and analysis, real-time display of Ethernet, IEEE 802.11, Bluetooth, USB, Frame Relay data, XML, PostScript, CSV data output, decryption support, and more.

System requirements: Windows XP and higher, any modern 64/32-bit processor, 400 Mb of RAM and 300 Mb of free disk space. Wireshark NetFlow Analyzer is a powerful tool that can greatly simplify the work of any network administrator.

Paessler PRTG

This traffic analyzer provides users with many useful features: support for monitoring LAN, WAN, VPN, applications, virtual server, QoS and environment. Multi-site monitoring is also supported. PRTG uses SNMP, WMI, NetFlow, SFlow, JFlow and packet analysis, as well as uptime/downtime monitoring and IPv6 support.

The free version allows you to use an unlimited number of sensors for 30 days, after which you can only use up to 100 for free.

Hello friends! Write about how to monitor traffic I was planning to right after I wrote the article ““, but somehow I forgot. Now I remember and will tell you how to track how much traffic you spend, and we will do this using a free program NetWorx.

You know, when you have unlimited internet connected, there is essentially no need to monitor the traffic, except for the sake of interest. Yes, now all city networks are usually unlimited, which cannot yet be said about 3G Internet, the tariffs of which are usually off the charts. I have been using CDMA Internet from Intertelecom all this summer, and I know all these nuances with traffic and tariffs first-hand. I have already written about how to set up and improve the Internet from Intertelecom, read and. So, their “unlimited” tariff costs 150 hryvnia per month. As you can see, I put the word unlimited in quotes, why? Yes, because there is a speed limit there, though only during the day, but there is nothing to be happy about, the speed there is simply terrible, it’s better to use GPRS.

The most normal tariff is 5 hryvnia per day upon connection, that is, if you don’t connect today, you don’t pay. But this is not unlimited, it is 1000 megabytes per day, until 12 o'clock at night. I have this tariff now, but at least the speed is decent, the real average speed is 200 Kbps. But 1000 MB per day is not very much at such a speed, so in this case it is simply necessary to control the traffic. Moreover, after using this 1000 MB, the cost of one megabyte is 10 kopecks, which is not small.

As soon as I connected this Internet, I started looking for a good program that would control my Internet traffic and could set a warning when the limit was used up. And I found it, of course, not right away, after trying a couple of things I came across the NetWorx program. Which we will talk about further.

NetWorx will monitor the traffic

Now I will tell you where to get the program and how to set it up.

1. Whatever program you are looking for, I have uploaded it to my hosting, so .

2. Run the downloaded file and install the program, I will not describe the installation process, I wrote about this in.

3. If after installation the program does not start on its own, then launch it with a shortcut on the desktop or in the start menu.

4. That’s it, the program already counts your Internet traffic, it hides in the tray and quietly works there. The working window of the program looks like this:

As you can see, the program displays Internet traffic for the current day and for the entire time, starting from the time you installed the program, you can see how much I burned :). In fact, the program does not need any settings. I’ll just tell you how to set a quota in NetWorx, that is, traffic restrictions and how to make the tray icon display the activity of incoming and outgoing Internet traffic.

5. Let's now make sure that Internet traffic activity is displayed in the tray.

Right-click on the program icon in the tray and select “Settings”

On the “Graph” tab, set it as in my screenshot, click “OK” and “Apply”. Now the NetWorx program tray icon will display the activity of the Internet connection.

6. And the last point in setting up this program will be setting a quota. For example, Intertelecom only gives me 1000 MB per day, so in order not to spend more than this amount, I set up the program so that when I use up 80% of my traffic, it warns me.

Right-click on the program icon in the tray and select “Quota”.

You see, today I used up my limit by 53%, below there is a field where you can specify at what percentage to report that the traffic is running out. Let's click on the “Settings” button and configure the quota.

Everything is very simple here, first we set what your quota is, for example, I have a daily quota, then we set the traffic; I selected all traffic, that is, incoming and outgoing. We set the “Clock” and "Units", I have megabytes. And of course, don’t forget to indicate the quota size, I have 1000 megabytes. Click “Ok” and that’s it, our quota is configured.

That's it, the program is fully configured and ready to count your traffic. It will launch along with the computer, and all you have to do is occasionally look in and see for fun how much traffic you have already burned. Good luck!