Statistics on number of users in 24h period

[Randall C Grimshaw]

In that configuration I would suggest editing syslog.conf to send local3.log to an external collector.

Randall Grimshaw rgrimsha at syr.edu
________________________________________
From: Brett Charbeneau [brett at wrl.org]
Sent: Tuesday, September 10, 2013 3:46 PM
To: Randall C Grimshaw
Cc: dhcp-hackers at lists.isc.org
Subject: RE: Statistics on number of users in 24h period

        Now parsing syslog like you describe is an interesting idea.
        I have to see if the ESV version in DD-WRT will allow me to crank up the
facility to capture/record MAC addresses...
        Thanks again for your suggestions!

Brett

On Tue, 10 Sep 2013, Randall C Grimshaw wrote:

RCG> I also use syslog for that, effectively parsing the logs into a last-state
RCG> table keyed on unique mac-address. You might find it easier to pursue
RCG> wireless management systems, NAC, or radius reports.
RCG>
RCG> Randall Grimshaw rgrimsha at syr.edu
RCG> ________________________________________
RCG> From: Brett Charbeneau [brett at wrl.org]
RCG> Sent: Tuesday, September 10, 2013 3:29 PM
RCG> To: Randall C Grimshaw
RCG> Cc: dhcp-hackers at lists.isc.org
RCG> Subject: RE: Statistics on number of users in 24h period
RCG>
RCG>         Thanks for the response!
RCG>         I can see how that approach would indicate how many addresses are being
RCG> used at a moment in time, but I'm looking for the cummulative number of devices
RCG> using the DHCP server over the course of a business day.
RCG>         This seems to be a completely different number unless I'm missing
RCG> something in your comment...?
RCG>
RCG> --
RCG> ********************************************************************
RCG> Brett Charbeneau, GSEC Gold, GCIH Gold
RCG> Network Administrator
RCG> Williamsburg Regional Library
RCG> 7770 Croaker Road
RCG> Williamsburg, VA 23188-7064
RCG> (757)259-4044          www.wrl.org
RCG> (757)259-4079 (fax)    brett at wrl.org
RCG> ********************************************************************
RCG>
RCG> On Tue, 10 Sep 2013, Randall C Grimshaw wrote:
RCG>
RCG> RCG> A trick that I like to use is to watch the peering lease imbalance messages
RCG> RCG> in the syslog... this will tell you how many pool addresses are in use at a
RCG> RCG> given time.
RCG> RCG>
RCG> RCG> Randall Grimshaw rgrimsha at syr.edu
RCG> RCG> ________________________________________
RCG> RCG> From: dhcp-hackers-bounces+rgrimsha=syr.edu at lists.isc.org [dhcp-hackers-bounces+rgrimsha=syr.edu at lists.isc.org] on behalf of Brett Charbeneau [brett at wrl.org]
RCG> RCG> Sent: Tuesday, September 10, 2013 3:18 PM
RCG> RCG> To: dhcp-hackers at lists.isc.org
RCG> RCG> Subject: Statistics on number of users in 24h period
RCG> RCG>
RCG> RCG>         I'd be very grateful for any help anyone can find the time to offer!
RCG> RCG>
RCG> RCG>         As a public library, we are really interested in determining the number
RCG> RCG> of unique devices that connect to our wireless network daily. The solution
RCG> RCG> seemed to be using the DHCP server's lease file to count unique clients.
RCG> RCG>         Does anyone know of a tool that does such a thing?
RCG> RCG>         We have used the ISC DHCP server for years (presently on verion 4.2 via
RCG> RCG> Debian) and I've been using this bit of code to sort out unique hardware
RCG> RCG> addresses:
RCG> RCG>
RCG> RCG> cat /var/lib/dhcp/dhcpd.leases  | grep "hardware ethernet" > stat_temp
RCG> RCG> sort -u stat_temp > stats_sorted
RCG> RCG> cat stats_sorted | grep -c hardware
RCG> RCG>
RCG> RCG>         After running the script adn archive the resulting number I overwrite
RCG> RCG> dhcpd.leases with an empty version and then restart the DHCP server.
RCG> RCG>         Easy.
RCG> RCG>         HOWEVER, when I try a similiar routine on a DD-WRT box running
RCG> RCG> 4.1-ESV-R2-1 on the
RCG> RCG>
RCG> RCG> /tmp/dnsmasq.leases
RCG> RCG>
RCG> RCG>         file, and grep on the first three octects of the IP address I get some
RCG> RCG> RADICALLY different numbers.
RCG> RCG>         And I'm stumped.
RCG> RCG>         Does ESV behave differently than the regular release when it comes to
RCG> RCG> the lease files?
RCG> RCG>
RCG> RCG> --
RCG> RCG> ********************************************************************
RCG> RCG> Brett Charbeneau, GSEC Gold, GCIH Gold
RCG> RCG> Network Administrator
RCG> RCG> Williamsburg Regional Library
RCG> RCG> 7770 Croaker Road
RCG> RCG> Williamsburg, VA 23188-7064
RCG> RCG> (757)259-4044          www.wrl.org
RCG> RCG> (757)259-4079 (fax)    brett at wrl.org
RCG> RCG> ********************************************************************
RCG> RCG>
RCG> RCG> _______________________________________________
RCG> RCG> dhcp-hackers mailing list
RCG> RCG> dhcp-hackers at lists.isc.org
RCG> RCG> https://lists.isc.org/mailman/listinfo/dhcp-hackers
RCG> RCG>
RCG> RCG>
RCG>
RCG>
RCG>
RCG>

--
********************************************************************
Brett Charbeneau, GSEC Gold, GCIH Gold
Network Administrator
Williamsburg Regional Library
7770 Croaker Road
Williamsburg, VA 23188-7064
(757)259-4044          www.wrl.org
(757)259-4079 (fax)    brett at wrl.org
********************************************************************