Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I'm connected through a LinkSys router with a custom linux on it. Is there any way to see if this router logs my network traffic, reading headers or something else? I don't have access to the router, though.

share|improve this question
It has to read the packet headers to route the packets. – Cry Havok Nov 16 '10 at 20:44
up vote 6 down vote accepted

If it isn't manipulating your packets (beyond NAT), then it is quite impossible for you to tell if your traffic is merely being tracked based on looking at packets on either side of the router.

The smoking gun, as it were, would be to catch traffic that looks like a log upload. To do that you need to monitor the traffic on the outside of the router, have knowledge of what kind of traffic was happening on the inside of the router, and compare the two for TCP conversations that don't exist on both sides.

share|improve this answer

If you don't control the router, you can't, because the packets wouldn't be modified in any way.

share|improve this answer
even if you control the router, if it's been root kitted or backdoored, then you maybe in the same situation. – The Unix Janitor Nov 16 '10 at 23:44

If your traffic is traversing a physical piece of hardware then it is possible for that device to capture and/or manipulate your traffic. Encryption addresses some of these concerns and allows for data integrity end to end. The device may be logging your traffic, but without access to the box, you can't tell what its doing. I suppose a clever person could put a sniffer on both the inside and outside interfaces and see if the traffic has been manipulated (NAT is of course going to manipulate it).

share|improve this answer

Welcome to ServerFault.

Honestly, there probably isn't, other than trying to visit some unsavory site and seeing if whoever controls the router mentions anything. If you are worried about your connection being monitored, consider tunneling your traffic through SSH to an external server, or looking for a cheap VPN service if you don't have one.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.