Take the 2-minute tour ×
Unix & Linux Stack Exchange is a question and answer site for users of Linux, FreeBSD and other Un*x-like operating systems.. It's 100% free, no registration required.

I would like to know if Debian has anywhere where it stores a history of network connectivity- IP addresses/server, DNS etc?

share|improve this question
2  
In the system logs (kern.log plus daemon.log should have it all), but I don't think there's any easy way to systematically extract networking-related information. –  Gilles May 6 '12 at 23:53
1  
Additionally, you can have a look at the DHCP lease database, stored in /var/lib/dhcp/*.leases. –  jofel May 7 '12 at 8:30
1  
You'll have to define what you mean by "network connectivity". Not everything is logged. –  Michael Slade May 7 '12 at 13:42
add comment

2 Answers

You may want to look into additional applications such as darkstat, ntop, ipfm that log statistics. Debian does not log it by default.

Look at apt-cache search network | grep statistics | grep -v lib somethine like

dstat - versatile resource statistics tool
ethstatus - console-based ethernet statistics monitor
tcpstat - network interface statistics reporting tool
wmnut - WindowMaker dock app that displays UPS statistics from NUT's upsd
share|improve this answer
add comment

The conntrackd package comes with a daemon that logs all the connections tracked by the firewall along with duration and amount of traffic exchanged both ways. Alternatively, you could add firewall rules that log all new connections establishment and teardown or go for more involved solutions like already suggested, or full blown IDS solutions (look for instance at securityonion).

To log DNS queries and their answers, you can either install your own local DNS server and configure it to log every query, or install sniffers that scan DNS traffic. Bro IDS would do that in addition to tracking every connection, HTTP query, SMTP sessions...

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.