Monitor others using the Internet on Mikrotik router

NC

In this article, I will show you how to monitor how other people are using the internet on the mikrotik router.

Go to "System" > "Logging"

Monitor others using the Internet on Mikrotik router

Click on "Actions" tab, put a meaningful name such as "RemoteLog", Choose "remote" option from type.

Remote Address : Use the command "ipconfig /all" in "CMD" command pannel.

Monitor others using the Internet on Mikrotik router

Now click on "Rules" tab, choose "firewall" from topics drop-down menu, choose your created action (RemoteLog) from action drop down menu.

Monitor others using the Internet on Mikrotik router

By default, the log file will contain the source IP address and the destination IP address. It's hard to determine what those sites are. In this part, I will list the IP addresses corresponding to what websites. You need to use the commands here:

/ip firewall address-list

add address=192.168.1.0/24 list=LAN-IP

First you will name your ip lan block, in this article I named it "LAN-IP", and my local network address is 192.168.1.0/24.

Monitor others using the Internet on Mikrotik router

Then create rules to collect server IP addresses of websites like FacebookYouTube, Tik-Tok. You just need to copy and paste it into the command window in winbox. On the basis of the IP server list received. You will configure it to store everyone's browsing history.

/ip firewall raw

#Facebook

add action=add-dst-to-address-list address-list=Facebook address-list-timeout=12h chain=prerouting comment=Facebook content=.facebook.com dst-address-list=!LAN-IP src-address-list=LAN-IP

add action=add-dst-to-address-list address-list=Facebook address-list-timeout=12h chain=prerouting content=.facebook.net dst-address-list=!LAN-IP src-address-list=LAN-IP

add action=add-dst-to-address-list address-list=Facebook address-list-timeout=12h chain=prerouting content=fb.com dst-address-list=!LAN-IP src-address-list=LAN-IP

add action=add-dst-to-address-list address-list=Facebook address-list-timeout=12h chain=prerouting content=.fbcdn.net dst-address-list=!LAN-IP src-address-list=LAN-IP

add action=add-dst-to-address-list address-list=Facebook address-list-timeout=12h chain=prerouting content=.fbsbx.com dst-address-list=!LAN-IP src-address-list=LAN-IP

add action=add-dst-to-address-list address-list=Facebook address-list-timeout=12h chain=prerouting content=fb.gg dst-address-list=!LAN-IP src-address-list=LAN-IP

add action=add-dst-to-address-list address-list=Facebook address-list-timeout=12h chain=prerouting content=fbwat.ch dst-address-list=!LAN-IP src-address-list=LAN-IP

add action=add-dst-to-address-list address-list=Facebook address-list-timeout=12h chain=prerouting content=messenger.com dst-address-list=!LAN-IP src-address-list=LAN-IP

add action=add-dst-to-address-list address-list=Facebook address-list-timeout=12h chain=prerouting content=m.me dst-address-list=!LAN-IP src-address-list=LAN-IP


#YouTube

add action=add-dst-to-address-list address-list=YouTube address-list-timeout=12h chain=prerouting comment=YouTube content=.youtube.com dst-address-list=!LAN-IP src-address-list=LAN-IP

add action=add-dst-to-address-list address-list=YouTube address-list-timeout=12h chain=prerouting content=.googlevideo.com dst-address-list=!LAN-IP src-address-list=LAN-IP

add action=add-dst-to-address-list address-list=YouTube address-list-timeout=12h chain=prerouting content=.ytimg.com dst-address-list=!LAN-IP src-address-list=LAN-IP

add action=add-dst-to-address-list address-list=YouTube address-list-timeout=12h chain=prerouting content=.youtu.be dst-address-list=!LAN-IP src-address-list=LAN-IP

add action=add-dst-to-address-list address-list=YouTube address-list-timeout=12h chain=prerouting content=.youtube.googleapis.com dst-address-list=!LAN-IP src-address-list=LAN-IP


#Instagram

add action=add-dst-to-address-list address-list=Instagram address-list-timeout=12h chain=prerouting comment=Instagram content=.instagram.com dst-address-list=!LAN-IP src-address-list=LAN-IP

add action=add-dst-to-address-list address-list=Instagram address-list-timeout=12h chain=prerouting content=.cdninstagram.com dst-address-list=!LAN-IP src-address-list=LAN-IP


#Twitter

add action=add-dst-to-address-list address-list=Twitter address-list-timeout=12h chain=prerouting comment=Twitter content=twitter.com dst-address-list=!LAN-IP src-address-list=LAN-IP

add action=add-dst-to-address-list address-list=Twitter address-list-timeout=12h chain=prerouting content=.twitter.com dst-address-list=!LAN-IP src-address-list=LAN-IP

add action=add-dst-to-address-list address-list=Twitter address-list-timeout=12h chain=prerouting content=.twimg.com dst-address-list=!LAN-IP src-address-list=LAN-IP

add action=add-dst-to-address-list address-list=Twitter address-list-timeout=12h chain=prerouting content=t.co dst-address-list=!LAN-IP src-address-list=LAN-IP


#Tiktok

add action=add-dst-to-address-list address-list=Tiktok address-list-timeout=12h chain=prerouting comment=Tiktok content=.tiktok.com dst-address-list=!LAN-IP src-address-list=LAN-IP

add action=add-dst-to-address-list address-list=Tiktok address-list-timeout=12h chain=prerouting content=.tiktokv.com dst-address-list=!LAN-IP src-address-list=LAN-IP

add action=add-dst-to-address-list address-list=Tiktok address-list-timeout=12h chain=prerouting content=.tiktokcdn.com dst-address-list=!LAN-IP src-address-list=LAN-IP

add action=add-dst-to-address-list address-list=Tiktok address-list-timeout=12h chain=prerouting content=.byteoversea.com dst-address-list=!LAN-IP src-address-list=LAN-IP

add action=add-dst-to-address-list address-list=Tiktok address-list-timeout=12h chain=prerouting content=.ibyteimg.com dst-address-list=!LAN-IP src-address-list=LAN-IP

add action=add-dst-to-address-list address-list=Tiktok address-list-timeout=12h chain=prerouting content=.ibytedtos.com dst-address-list=!LAN-IP src-address-list=LAN-IP

add action=add-dst-to-address-list address-list=Tiktok address-list-timeout=12h chain=prerouting content=.myqcloud.com dst-address-list=!LAN-IP src-address-list=LAN-IP


/ip firewall filter

add action=log chain=forward comment=Facebook connection-state=new dst-address-list=Facebook log-prefix=Facebook src-address-list=LAN-IP

add action=log chain=forward comment=YouTube connection-state=new dst-address-list=YouTube log-prefix=YouTube src-address-list=LAN-IP

add action=log chain=forward comment=Instagram connection-state=new dst-address-list=Instagram log-prefix=Instagram src-address-list=LAN-IP

add action=log chain=forward comment=Twitter connection-state=new dst-address-list=Twitter log-prefix=Twitter src-address-list=LAN-IP

add action=log chain=forward comment=Tiktok connection-state=new dst-address-list=Tiktok log-prefix=Tiktok src-address-list=LAN-IP

Mikrotik syslog Daemon is a windows-based free syslog server that can be used to view and search mikrotik firewall log. You will find a download link here:

MT Syslog Daemon is free to download and can be found in MikroTik Download Page: https://mikrotik.com/archive

Monitor others using the Internet on Mikrotik router

Mt syslog Daemon is a lightweight application and does not need to install. Just running this application, firewall log can be viewed and searched. MT Syslog Daemon saves all logs in tmplog file which can be used directly to search any specific log.

Tags: Mikrotik