[SOLVED] What exactly is logged when router logging is enabled?

[Batman1121]

Is it just the domain name or the entire URL?

 

[Newtonius]

What is the model & brand of your router? Routers from different brands vary on how they show their logs.

 

[Ralston18]

Here is what my Linksys WRT1900 AC Router can can capture and show:

https://imgur.com/gqB1mh7

View: https://imgur.com/gqB1mh7

 

[bill001g]

You can thank Mr Snowden for exposing the government for "logging?" people they really should not have been.

As a result pretty much everything on the internet is now encrypted between the PC and the end server to prevent any device, or government, from snooping on whats going on.

You will never see the actual URL's . You also will not see the DNS names directly since they sessions themselves are opened by IP address. A IP address has much less value than before because of all the cloud based hosting. A IP can be shared by many different servers and most times if you try to reverse look them up you get stuff like cloudflare, amazon, google etc.

Some devices attempt to spy on the DNS requests that occur just before the session is opened. This hole has been closed to some extent by the latest browsers from chrome and firefox. They have the option to use a encrypted DNS request. Even without encryption most home routers only would intercept dns traffic where someone is using teh router as the dns cache server. This is why parental controls many times do not work on routers if someone just sets the dns server in there end device rather than asking the router to proxy it.

So what you will likely see if your router has any ability is IP addresses and amounts of traffic.

 

[Batman1121]

What is the model & brand of your router? Routers from different brands vary on how they show their logs.

https://www.tp-link.com/us/home-networking/wifi-router/archer-a54/#overview

 

[Batman1121]

You can thank Mr Snowden for exposing the government for "logging?" people they really should not have been.

As a result pretty much everything on the internet is now encrypted between the PC and the end server to prevent any device, or government, from snooping on whats going on.

You will never see the actual URL's . You also will not see the DNS names directly since they sessions themselves are opened by IP address. A IP address has much less value than before because of all the cloud based hosting. A IP can be shared by many different servers and most times if you try to reverse look them up you get stuff like cloudflare, amazon, google etc.

Some devices attempt to spy on the DNS requests that occur just before the session is opened. This hole has been closed to some extent by the latest browsers from chrome and firefox. They have the option to use a encrypted DNS request. Even without encryption most home routers only would intercept dns traffic where someone is using teh router as the dns cache server. This is why parental controls many times do not work on routers if someone just sets the dns server in there end device rather than asking the router to proxy it.

So what you will likely see if your router has any ability is IP addresses and amounts of traffic.

Interesting. Thanks.

 

[Newtonius]

https://www.tp-link.com/us/home-networking/wifi-router/archer-a54/#overview

Please refer to your user manual and try checking your site's Logging settings
https://static.tp-link.com/res/down/doc/Archer_C1200(US)_V1_UG.pdf
The section that guides you to the logging feature is on Page 88. I can't see what options are available to be logged but I don't think your router has the ability to record visited webpages anyway as your router's series doesn't support TP's Homecare feature which is a parental control app that allows you to see what webpages are visited.

To access your router's webpage and check these settings yourself, please refer to pg 69 on how to do so (basically open a web browser and type this in the url bar: 192.168.0.1). The default username and password when prompted is admin.