Iptmon: simple iptables-based bandwidth monitoring

oofnik · November 7, 2020, 12:03pm

Oh, I suspect it's because there are some newlines in your /etc/hosts.

Can you share the output of:

cat /etc/hosts /tmp/hosts/* | grep '^$' | wc -l

If it's not 0, I forgot to account for newlines in those files, and that's probably what's causing the bug.

anon50098793 · November 7, 2020, 12:05pm

bingo! ( was 1 )

???

	"init")
		backup_orig
		init_chain
		finalize_chain
		commit
		load_static_hosts
		cat /tmp/dhcp.leases | cut -d' ' -f2,3 | while read tMAC tIP; do
			$0 arp-add "$tMAC" "$tIP"
		done

oofnik · November 7, 2020, 12:36pm

Should be fixed now. Just pushed v0.1.1.
Needed to use a smarter grep expression to handle both newlines and comments.

Could you give it a try?

anon50098793 · November 7, 2020, 12:40pm

yup... better...

oofnik · November 7, 2020, 12:41pm

Great, thanks for the feedback!

anon50098793 · November 7, 2020, 12:50pm

actually are we not hitting the counters now?

edit false alarm my bad

old

-A INPUT -j iptmon_input
-A OUTPUT -j iptmon_output
-A iptmon_input -j RETURN
-A iptmon_output -j RETURN
-A iptmon_rx -s 10.2.3.1/32 -m comment --comment rx_rpi-dca6325631 -j RETURN
-A iptmon_tx -d 10.2.3.1/32 -m comment --comment tx_rpi-dca6325631 -j RETURN

new (master)

-A INPUT -j iptmon_input
-A FORWARD -j iptmon_tx
-A FORWARD -j iptmon_rx
-A OUTPUT -j iptmon_output
-A iptmon_input -j RETURN
-A iptmon_output -j RETURN
-A iptmon_rx -s 127.0.0.1/32 -m comment --comment rx_localhost -j RETURN
-A iptmon_rx -s 10.2.3.1/32 -m comment --comment rx_rpi-dca6325631 -j RETURN
-A iptmon_tx -d 127.0.0.1/32 -m comment --comment tx_localhost -j RETURN
-A iptmon_tx -d 10.2.3.1/32 -m comment --comment tx_rpi-dca6325631 -j RETURN

oofnik · November 7, 2020, 1:05pm

Hm, it shouldn't have affected the rule generation.
I'd try to reload the firewall rules manually:

# iptmon init
# kill -HUP `pidof dnsmasq`

anon50098793 · November 7, 2020, 1:05pm

ok, cool... must have done something whacky... i'll sort it out!

darrepac · February 27, 2021, 10:43am

iptmon sounds interesting but it seems I am too a neebie to understand everything.
I have OpenWRT 19.07.7
How can I check that:

iptmon depends on dnsmasq version >=2.80-16, which merged a PR to enable script-arp so make sure your dnsmasq package is up-to-date.

If you are using luci-app-statistics prior to git commit 4778aa6 you will need to upgrade as this commit merged a PR to fix the ip6tables firewall statistics view in LuCI.

dnsmasq -v gives me 2.80 but not much details more for example

oofnik · February 28, 2021, 6:54am

Hi @darrepac, this was an issue about a year ago. I submitted a patch to the dnsmasq package that has since been merged, so you should be fine.

To get the full installed version of any package, you can run opkg info dnsmasq | grep Version. This info is also available through the web UI under "System -> Software".

darrepac · February 28, 2021, 11:26am

Thanks! I could have found the system -> software...

topsbr · March 12, 2021, 8:02pm

Very beautiful this panel @oofnik ...

Is there a step-by-step, very detailed tutorial that teaches you how to build this monitoring panel using Grafana?

I am self-taught in Linux, I know some things and I always like to learn ... I can upload a Linux (I really like Debian) on a virtual or real machine here at home or even in the cloud (AWS free tier lol) and study it even more ...

By the way, I will install the ipk on my router to test ...

I use nlbwmonitor, but I constantly observe the corruption of the data file - I don't know if this is related to the fact of uses extroot, I believe not, I have already tested my pendrive and no problem was found on it.

oofnik · March 13, 2021, 12:36pm

Hi @topsbr, there is no tutorial but you can simply download it from the Grafana site and import it in to your Grafana installation by entering the dashboard ID. You can then customize it as you wish.

rseiler · November 24, 2021, 4:30pm

For anyone wondering about 21.02, the answer is here.

manually add dhcpscript to /etc/config/dhcp, as below

config dnsmasq
          option dhcpscript '/usr/sbin/iptmon'

add "iptmon init" to /etc/rc.local

===

But my question is on IPv6, which lands like this in the view:

Or this:

First, is it normal for it to be unconfigured by default, unlike Ipv4?

Second, which of the many choices would be correct (I show both paths above, mangle and filter).

Thanks

wrtfan2 · March 19, 2022, 10:08am

Thanks so much for building this. I'm trying to understand the impact of running statistic gathering on my router. I have a Influx and Grafana installation on the LAN, so I'd like to push as much of the processing and memory usage to that PC instead of putting the burden on my router.

[edit] In terms of dependencies for iptmon, can I install collectd instead of installing luci-app-statistics? The thing that would be lost by only installing collectd without luci-app-statistics is the UI configuration right for collectd right? I'd have to manually configure collectd?

wrtfan2 · March 21, 2022, 2:12am

Kind of a followup to the previous question. With luci-app-statistics and Iptmon installed, how do I view bandwidth of specific host devices? It is suppose to show up on the LuCI UI's staistics menu? If someone could post a screen shot, that'd be really helpful. I don't know if the install did not go OK and I'm not seeing what I'm suppose to, or if the host data is available a different view than the statistics menu.

rseiler · March 21, 2022, 3:13am

Yes, it's the Statistics menu. Yes, pretty sure you need luci-app-statistics (which installs collectd).

Of course, you have to use the script to install the .ipk as shown on the github page or nothing is going to be happening.
.
You also may or may not need to do this:

github.com/oofnikj/iptmon

Issue with iptmon installation OpenWRT 21.02.0

opened 08:18AM - 17 Sep 21 UTC

ChrisGoggin

Thanks for the iptmon plugin I have been using it for quite a while on OpenWrt 1…9.07.x and it does exactly what I need! iptmon v0.1.6 installs as per your readme with no problems with OpenWrt 19.07. However, it does not install correctly on 21.02.00. Luckily I read through the other open issues and found the workaround for my problem in open issue *init without static hosts #14* As Juergen noted in his comments if you: 1. manually add dhcpscript to /etc/config/dhcp, as below ``` config dnsmasq option dhcpscript '/usr/sbin/iptmon' ``` 2. add "iptmon init" to /etc/rc.local Once I made these two changes iptmon is working fine with OpenWrt 21.02.0. I have raised this issue so that anyone else with similar problems will find a solution quickly. Thanks again for the great plugin, Chris

I no longer use iptmon, so that's all I can tell you.

wrtfan2 · March 21, 2022, 5:59am

Oh, I think you just identified the issue I was having. I installed iptmon by doing this:

opkg install ./iptmon_0.1.6-1_all.ipk

But you're saying you need to use a script to install it? I didn't see any scripts in the github project. Sorry, I'm new to OpenWRT and I've only installed things via opkg. Can tell me which script?

rseiler · March 21, 2022, 6:16am

Yes, it's at the bottom of the page, but now that I look at it again it's not much of a script: it's doing what you did, just in more generalized form (you apparently just downloaded the ipk manually).

If you're not seeing data, I suspect that it's because of needing to do what's mentioned in the link in my previous post.

wrtfan2 · March 22, 2022, 4:53am

It looks like the problem was that I didn't know that the "firewall" network plugin is the iptables collectd component I was looking for. When I enabled it and blindly add something in there, I can now see data. But it's not per-host data I was after. The configuration of the iptables isn't very intuitive. There's table, chain, and comment...I'm not really sure what set of selections would provide the per-host data I want collectd to collect.

That chat was from playing with multiple types of configurations for iptables plugin.