1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

DNS on the log file

Discussion in 'Tomato Firmware' started by smartins68, Nov 17, 2010.

  1. smartins68

    smartins68 Networkin' Nut Member

    Another newbie question...
    I am using Tomato Firmware v1.28.1816 (Polarcloud.com) and when I check the log file I src and dst IP, but I would like to see the destination name resolved by DNS. Is it possible?
     
  2. rhester72

    rhester72 Network Guru Member

    What sort of entries in the log? Example?

    Rodney
     
  3. smartins68

    smartins68 Networkin' Nut Member

    I looking entries where the destination has a resolved name. For example, today I see:

    Nov 17 08:55:26 Timaowrt54gs user.warn kernel: ACCEPT IN=br0 OUT=vlan1 SRC=192.168.2.217 DST=10.17.22.46 LEN=106 TOS=0x00 PREC=0x00 TTL=126 ID=29739 PROTO=UDP SPT=60967 DPT=161 LEN=86
    Nov 17 08:55:29 Timaowrt54gs user.warn kernel: ACCEPT IN=br0 OUT=vlan1 SRC=192.168.2.220 DST=190.38.146.81 LEN=168 TOS=0x00 PREC=0x00 TTL=126 ID=36483 PROTO=UDP SPT=44043 DPT=30806 LEN=148

    But I would like to have something like the examples below. The name resolution below is fake, so I used for example purpose.

    Nov 17 08:55:26 Timaowrt54gs user.warn kernel: ACCEPT IN=br0 OUT=vlan1 SRC=192.168.2.217 DST=www.adultwebsite.com LEN=106 TOS=0x00 PREC=0x00 TTL=126 ID=29739 PROTO=UDP SPT=60967 DPT=161 LEN=86
    Nov 17 08:55:29 Timaowrt54gs user.warn kernel: ACCEPT IN=br0 OUT=vlan1 SRC=192.168.2.220 DST=www.educationK12.com LEN=168 TOS=0x00 PREC=0x00 TTL=126 ID=36483 PROTO=UDP SPT=44043 DPT=30806 LEN=148

    This way I can see what websites my kids are acessing.

     
  4. rhester72

    rhester72 Network Guru Member

    iptables has no means of doing DNS resolution (and you wouldn't want it to - performance would go to hell in a handbasket!).

    Tomato USB supports weblogging, which sounds like exactly what you're looking for.

    Rodney
     
  5. smartins68

    smartins68 Networkin' Nut Member

    Thanks Rodney. I tested Wall Watcher and it does not resolve the name in the logs. I will look into WebLogging, but I don't have Tomato USB installed. I actually have the Tomato Firmware v1.28.1816 (Polarcloud.com). Do you recommend moving to Tomato USB?

    Cheers​
     
  6. rhester72

    rhester72 Network Guru Member

    Quite!

    Rodney
     

Share This Page