Print

Please login or register.
1 Hour 1 Day 1 Week 1 Month Forever
Login with username, password and session length

[jmorlan]

After some effort I managed to get the DIR-601 to talk to Wallwatcher. However, it is just giving me the most incomprehensible information and Wallwatcher's attempt to analyze them leads to nothing.

These are all labeled "M" and they are simply messages generated by the router. I want to be able to see the actual traffic. I see no entries for incoming or outgoing at all in all of these entries. Nor do I see the activity on the local ports. No way to determine bandwidth usage or logs of internet sites visited.

I created a screen-shot showing the useless messages, but I cannot figure out how to upload it here.


Wallwatcher by Joe Morlan, on Flickr

Are there some settings I'm missing?

[FurryNutz]

uploade any picture files to places like photobucket. Then use the forum URL address they give you for the pictures here in the forums. The forums will display the pictures so we can see what you are talking about.

[jmorlan]

Thanks.  I edited the original message and added the screen shot. 

[FurryNutz]

I don't have much experience with Wall Watcher, does this program support collecting of live traffic data?
Not sure even if the router has the ability to report live traffic data with only the exception of reporting error or normal conditions. This maybe a condition of the router and what it's designed to do. These are fairly low budget routers and might not be a lot of design into debug and traffic data collection on the back end. These are general routers for the average home user. Any debug data collection might be fairly basic and not too detailed.

[jmorlan]

Yes, WallWatcher definitely has the ability to record and analyze in/out traffic.  It's color coded depending on the direction and can generate some very nice reports.

The router logs report system activity, attacks and notices by default.  This log can also report debug information and dropped packets.  These are reported at: /st_log.asp  This is the information WallWatcher is logging and it's useless to me.  The router traffic is reported at /internet_sessions.asp  and includes all active sessions.  That's the information I want WallWatcher to capture and analyze. 

The router is currently configured to enable logging to a syslog server.  I also configured the router access policy to log web access to other machines.  I feel like I'm close to getting this working.  I just need to switch the type of log, Wallwatcher is picking up.  Wallwatcher is configured to monitor port 514.  Is that right? 

[FurryNutz]

You'll need to ask the Mfr of Wallwatcher about what ports it's using. I presume the router shouldn't need to be configured for any ports for an application, however the Mfr would have this information.

Have you used Wireshark before?

[jmorlan]

Well my understanding is that port 514 is the standard for a syslog server and that's what Wallwatcher has configured as the default for the DIR-600 series.  I have not used Wireshark but I believe it's a packet sniffer. 

[FurryNutz]

I would ask the Mfr of Wallwatcher and see if there is any other information or configurations needed. Maybe this is a result of the router just not reporting what your looking for. Let us know what they say.

[jmorlan]

Wallwatcher is no longer supported.  Support ended last February.  So there is nobody to ask.  It's a free program. 

I allowed it to "Auto-Select" a router and it came up with two routers to try.

1. Tipping Point X-Series
2. Untangle

Both of these work as substitutes for the DIR-601.  However they are providing only limited in/out data.  Essentially it now shows only connections in/out to mcast.net.  This is interesting because I do not see these connections in the DIR-601 GUI. 

Thanks.