It is planned to install a clean ubuntu server 18.04 on a machine with two network cards. One card will receive internet from the provider. The second is the local network through which users will access the Internet. It is required to keep logs - who visited which sites. It would be great if I could see the mac address of the device in the logs. I read about
tcpdump -i INTERFACENAME -e to display data with a mac-address. But I can’t find anywhere else information on how to leave tcpdump working as a service. Logging should be kept constantly.
On another machine, I have mysql. There I enabled logging of all queries to the database. And the most pleasant thing - the logs are automatically broken by days and automatically archived. I wish it were here too.
Whatever it was, you need to quickly and easily set up logging in the easiest way. We just need logs. Even without mac addresses.
What can be used?