Mikro-Watch

PHP process to capture and relay or display the mikrotik Accounting data.

Mikro-Watch will :

Fetch the data from the mikrotik router.
Process each bidirectional transfer to get metrics for each internal IP (within specified range)
Push or display data.

Currently push to inflxudb directly, but plans are to output data for telegraf ingestion or display in a simple webpage.

Requirements

PHP 5.6 or later
Composer
or Docker

Configuration and running

First, make sure your router is configured to accept request to the account page by going to IP -> Accounting -> Web Access. The default config uses HTTP, to use HTTPS, remove or change the MIKROTIK_PROTO line and have MIKROTIK_SSL_VERIFY if you have a selfsigned cert.

In Address, enter a single/range of authorized IP that can access the accounting page. Ex ( 192.168.0.50/32 for single ip, 192.168.0.0/24 for the whole /24 subnet)

Docker

docker run -d --name mikro-watch \
    -e MIKROTIK_IP=10.0.0.1 \
    -e MIKROTIK_PROTO=http \
    -e NETWORK_RANGE=10.0.0.1-10.0.0.255 \
    -e INFLUXDB_HOST=10.0.0.1 \
    -e INFLUXDB_USER=user \
    -e INFLUXDB_PASS=***pass*** \
    -e INFLUXDB_DATABASE=influxdb \
    -e DNS_REVERSE_LOOKUP=false \
    -e DNS_REVERSE_LOOKUP_TRIM_SUFFIX=false \
    ncareau/mikro-watch

Docker compose

version: '3'
services:

    mikro-watch:
        image: ncareau/mikro-watch
        container_name: mikro-watch
        environment:
            - MIKROTIK_IP=10.0.0.1
            - MIKROTIK_PROTO=http
            - NETWORK_RANGE=10.0.0.1-10.0.0.255
            - INFLUXDB_HOST=10.0.0.1
            - INFLUXDB_USER=user
            - INFLUXDB_PASS=***pass***
            - INFLUXDB_DATABASE=influxdb
            - DNS_REVERSE_LOOKUP=false
            - DNS_REVERSE_LOOKUP_TRIM_SUFFIX=false
        restart : unless-stopped

Manual

Copy the .env file to .env.local and change the information with your current network.

php mikro-watch influxdb will push once to influxdb
php mikro-watch daemon will start a daemon pushing to influxdb each 10 sec.
- --timeout 5 or -t 5 to change the timeout between calls in seconds.
php mikro-watch json will output the accounting result as json.

Instructions to install this application as a systemd service are located in the mikrowatch.service file.

Environment Variables

Variable	Description
`MIKROTIK_IP`	IP of your mikrotik router, can be multiple ips separated by a coma ","
`MIKROTIK_PROTO`	Default: `https`
`MIKROTIK_SSL_VERIFY`	If using `https`, verify for valid ssl certificate (true/false)
`MIKROTIK_PORT`	Use if your Mikrotik listens on a port other than 80 for http or 443 for https. Must include `:` For example `:8081`
`NETWORK_RANGE`	Range of your network to filter ips.
`INFLUXDB_HOST`	Influxdb host
`INFLUXDB_USER`	Influxdb username
`INFLUXDB_PASS`	Influxdb password
`INFLUXDB_DATABASE`	Influxdb database
`DNS_REVERSE_LOOKUP`	Enable reverse lookup
`DNS_REVERSE_LOOKUP_TRIM_SUFFIX`	Remove domain suffix from domain name (hostname only)

Note & Troubleshooting

When FastTrack is enabled, some packet will not be accounted for. To disable this (This will result in more CPU usage on your router) disable the fasttrack rule in IP -> Firewall -> Filter Rules.

Calling the accounting webpage resets the counter. This means that if multiple processes or users call the mikrotik api, only a subset of the data will be captured.

ncareau/Mikro-Watch