Statistics on number of users in 24h period

[Randall C Grimshaw]

I also use syslog for that, effectively parsing the logs into a last-state table keyed on unique mac-address. You might find it easier to pursue wireless management systems, NAC, or radius reports.

Randall Grimshaw rgrimsha at syr.edu
________________________________________
From: Brett Charbeneau [brett at wrl.org]
Sent: Tuesday, September 10, 2013 3:29 PM
To: Randall C Grimshaw
Cc: dhcp-hackers at lists.isc.org
Subject: RE: Statistics on number of users in 24h period

        Thanks for the response!
        I can see how that approach would indicate how many addresses are being
used at a moment in time, but I'm looking for the cummulative number of devices
using the DHCP server over the course of a business day.
        This seems to be a completely different number unless I'm missing
something in your comment...?

--
********************************************************************
Brett Charbeneau, GSEC Gold, GCIH Gold
Network Administrator
Williamsburg Regional Library
7770 Croaker Road
Williamsburg, VA 23188-7064
(757)259-4044          www.wrl.org
(757)259-4079 (fax)    brett at wrl.org
********************************************************************

On Tue, 10 Sep 2013, Randall C Grimshaw wrote:

RCG> A trick that I like to use is to watch the peering lease imbalance messages
RCG> in the syslog... this will tell you how many pool addresses are in use at a
RCG> given time.
RCG>
RCG> Randall Grimshaw rgrimsha at syr.edu
RCG> ________________________________________
RCG> From: dhcp-hackers-bounces+rgrimsha=syr.edu at lists.isc.org [dhcp-hackers-bounces+rgrimsha=syr.edu at lists.isc.org] on behalf of Brett Charbeneau [brett at wrl.org]
RCG> Sent: Tuesday, September 10, 2013 3:18 PM
RCG> To: dhcp-hackers at lists.isc.org
RCG> Subject: Statistics on number of users in 24h period
RCG>
RCG>         I'd be very grateful for any help anyone can find the time to offer!
RCG>
RCG>         As a public library, we are really interested in determining the number
RCG> of unique devices that connect to our wireless network daily. The solution
RCG> seemed to be using the DHCP server's lease file to count unique clients.
RCG>         Does anyone know of a tool that does such a thing?
RCG>         We have used the ISC DHCP server for years (presently on verion 4.2 via
RCG> Debian) and I've been using this bit of code to sort out unique hardware
RCG> addresses:
RCG>
RCG> cat /var/lib/dhcp/dhcpd.leases  | grep "hardware ethernet" > stat_temp
RCG> sort -u stat_temp > stats_sorted
RCG> cat stats_sorted | grep -c hardware
RCG>
RCG>         After running the script adn archive the resulting number I overwrite
RCG> dhcpd.leases with an empty version and then restart the DHCP server.
RCG>         Easy.
RCG>         HOWEVER, when I try a similiar routine on a DD-WRT box running
RCG> 4.1-ESV-R2-1 on the
RCG>
RCG> /tmp/dnsmasq.leases
RCG>
RCG>         file, and grep on the first three octects of the IP address I get some
RCG> RADICALLY different numbers.
RCG>         And I'm stumped.
RCG>         Does ESV behave differently than the regular release when it comes to
RCG> the lease files?
RCG>
RCG> --
RCG> ********************************************************************
RCG> Brett Charbeneau, GSEC Gold, GCIH Gold
RCG> Network Administrator
RCG> Williamsburg Regional Library
RCG> 7770 Croaker Road
RCG> Williamsburg, VA 23188-7064
RCG> (757)259-4044          www.wrl.org
RCG> (757)259-4079 (fax)    brett at wrl.org
RCG> ********************************************************************
RCG>
RCG> _______________________________________________
RCG> dhcp-hackers mailing list
RCG> dhcp-hackers at lists.isc.org
RCG> https://lists.isc.org/mailman/listinfo/dhcp-hackers
RCG>
RCG>