How to Track Device-Specific Internet Activity on Your Network

If you need per-device tracking for DNS activity, a standard DNS filtering service won’t be enough. Because DNS services operate at the network level, they only see traffic coming from your public IP address, not individual devices.

However, there are several alternative solutions that allow you to monitor which device is making requests, providing better control over internet usage in homes, schools, and businesses.

This guide outlines four effective methods to track per-device activity while still benefiting from DNS filtering and internet security.

1. Use a Local DNS Resolver (Pi-hole, etc.)

A local DNS resolver works by capturing and logging all DNS requests before forwarding them to an external DNS provider. This allows you to see which device is making each request while still enforcing content filtering.

How It Works:

1. Each device on your network sends DNS queries to the local resolver instead of a public DNS service.
2. The local resolver logs the device name/IP before forwarding the request to an external DNS filtering provider (e.g., CleanBrowsing, OpenDNS, Cloudflare Family).
3. This setup provides per-device DNS logs while still enforcing SafeSearch, content filtering, and security policies.

Best Options:

✅ Pi-hole – Open-source, network-wide ad and tracker blocker with per-device logging.

How to Set Up a Local DNS Resolver:

1. Install Pi-hole on a Raspberry Pi, Linux server, or Docker container.
2. Configure your router’s DHCP settings to point all devices to the local DNS resolver.
3. Set up forwarding rules to send DNS queries to an external filtering service (like CleanBrowsing or OpenDNS).
4. View real-time logs to track which devices are making requests.

🔹 Benefit: Provides per-device visibility while keeping content filtering in place.

---

2. Check Your Router Logs

Many advanced routers come with built-in DNS logging that can show which devices are making requests and which domains they are visiting.

How to Check Router Logs:

1. Log in to your router’s admin panel
   • Most routers can be accessed by entering 192.168.1.1 or 192.168.0.1 in a web browser.
2. Look for “DNS Logs,” “Device Traffic,” or “Parental Controls.”
   • Some routers show a list of connected devices and their activity.
3. Enable logging if necessary
   • Not all routers log DNS requests by default, so you may need to enable this setting.

Tip:

If your router supports custom firmware like OpenWRT or DD-WRT, you may be able to install advanced logging tools for deeper tracking.

🔹 Benefit: Some routers log per-device activity, but functionality depends on the router model and firmware.

---

3. Use Network Monitoring Software

For businesses, schools, or tech-savvy users, network monitoring software provides granular insights into per-device activity, including DNS requests, bandwidth usage, and content filtering.

Best Options:

✅ pfSense – A firewall and router OS with built-in per-device DNS logging.
✅ Untangle NG Firewall – Provides deep packet inspection and DNS tracking.

How to Set Up Network Monitoring:

1. Install the firewall software on a dedicated machine or virtual server.
2. Configure your router to route all traffic through the firewall.
3. Enable per-device logging to see which devices are making requests.

🔹 Benefit: Provides detailed per-device logging and granular control, but requires technical expertise to configure.

---

4. Enforce Per-Device SafeSearch and Filtering Policies

If your goal is to enforce content filtering rather than just tracking DNS activity, you can apply SafeSearch and parental control settings per device instead of network-wide.

Best Options:

✅ Google Family Link – Forces SafeSearch and content filtering for child accounts.
✅ Microsoft Family Safety – Similar to Google Family Link, but designed for Windows devices.
✅ Per-device DNS settings – Instead of setting DNS filtering at the router level, manually configure each device to use a filtered DNS resolver.

How to Enforce SafeSearch Per Device:

1. Enable Google SafeSearch
   • Go to Google Preferences and turn on SafeSearch.
2. Use device-level DNS settings
   • Configure each device to use a filtered DNS service (like CleanBrowsing or OpenDNS) instead of relying on the router.
3. Restrict browser settings
   • Lock SafeSearch in browsers using browser extensions or parental control tools.

🔹 Benefit: Ensures SafeSearch and content filtering per device, even if a user switches networks.