My brain is here

I have been using snmp to monitor Input and Output traffict from my router base on openwrt . but I want to know if if my users have a virus spamer or they use P2P on my network?, how do you find out over the time?. I can run this command any time to find out how many connections there is on the router:

root@OpenWrt:/jffs/etc# cat /proc/net/ip_conntrack | wc -l
1

So far so good, but i want to have historical data that can give me an idea of when the connections go up or down. Here comes the power of SNMP. First we need iptables-snmp – An snmpd plugin to access iptables rules:

opkg install iptables-snmp

Now we need to created the executable, I put files under /etc/snmp but it is a matter of taste :
root@OpenWrt:/etc/snmp# cat conntrack-count

#!/bin/sh
exit `cat /proc/net/ip_conntrack | wc -l`

Now this needs to be called from the snmpd daemon. So I added on the configuration file:
/etc/config/snmpd:

config exec conntrack_count
option execname conntrack_count
option miboid 1.3.6.1.3.19811018.30
option prog ‘/etc/snmp/conntrack-count’

Reload the snmp daemon /etc/init.d/snmpd reload (you did install it did nt you? opkg install snmpd). So now if you call 1.3.6.1.3.19811018.30 from a snmp client, you can see the number of connections, I use MRTG to create the graphic.

Title[router]: ip_conntrack
Target[router]: 1.3.6.1.3.19811018.30.100.1&1.3.6.1.3.19811018.30.100.1:public@your.ip:
MaxBytes[router]: 100

Here is the output:

Before you create an exec you maybe check a ready to go snmp variables in this page: SNMP OIDs for OpenWrt and here 46 SNMP SMIv1 and v2 MIBs ( 10 SMIv1, 36 SMIv2 ) for Linux

Only a few commands are needed to use Quality Of Service (QOS), just login on theconsole as root@ip.of.router and then:

opkg update;
opkg install qos-scripts;
/etc/init.d/qos enable;
/etc/init.d/qos start;

You would find the config file under /etc/config/qos, I mostly only modify the download value so I limit the amount of bandwidth that I share with others so they do not collapse my connection. If you want to check that qos is working just run this command qos-stat