Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

We are a small business using a Vigor 2820 as the internet router, and we'd like to install a software that could report any internet usage from our users.

I already tried the "official" software made by Draytek called "SmartMonitor", but is reliability is a real issue as it doesn't seem to keep capturing packets after working 3 to 6hours (randomly), whereas Wireshark keeps capturing packets after that amount of time. As I'm really fed up with this tool, I'm looking for other solutions but I still want the same features: users statistics, websites ranking, users traffic, ...

I already enabled the port mirroring feature, so it would be perfect if you could suggest me a port mirroring-based software (ideally freeware). I thought I had found the good one with Etherscout, but it just doesn't launch. I am even open to a tool that would "just" make some reports based on Wireshark captured files (*.pcap).

Thank you for any of your suggestion,

share|improve this question
up vote 2 down vote accepted

I finally choose the PRTG program (the free version with 10 sensors) and everything seems to work fine.
Maybe if our needs and our network increase I would rather be looking for a proxy server solution as Chopper3 suggested, but for now it's enough for us.

share|improve this answer

Put a dedicated proxy/cache/firewall between your users and your router - you'll see performance and security benefits plus be able to log all traffic. Any old PC running linux should do if you have one lying around.

share|improve this answer
Hi, I don't want to add a proxy and change every user's configuration. We are happy with the current network configuration, we just want to know more about users internet usage, that's why the port mirroring and a PC plugged directly into the router still seems a good solution to me. The proxy is a good solution, you're right but I'm not looking for that solution, thanks. – Nicolas May 12 '10 at 9:34
Why would you have to change the user's config, just give the proxy the IP address of your default gateway, change the router's interface IP and set that as the proxy's DG. – Chopper3 May 12 '10 at 9:56
Yeah I know, it was exactly what I wanted to say by "user's config". But in this case, what software would you use to display (graphically) the results? Maybe if there's a really great graphic report tool I would look for your solution. Thanks. – Nicolas May 12 '10 at 10:11
MS Proxy Server or MS ISA will do this, still looking for free linux options though, back in a bit. – Chopper3 May 12 '10 at 11:35
Thanks for seeking. I am more looking for a free soft to do that (windows or linux). Cheers. – Nicolas May 12 '10 at 11:40

Depending on how much detail you want you can use ntop hooked up to the mirror port. The Mirror port would mirror the port that connects to the gateway of course. Also keep in mind Mirror ports might not always be stable on switches, I have seen them bork 3coms before.

This would be more suited for things like getting an overview of who might me sucking up your bandwidth that it would be for spying on all of a users activity (Which is something I personally am against).

share|improve this answer
Hi, I need to see for example a top of visited websites, and the repartition between the users, I'm not auiet sure ntop does that for what I've seen. The question here is not to know if we are against that idea or not, I just have to do it; I never said it was the way I think ;) – Nicolas May 12 '10 at 13:24

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.