Linux is a main OS in SOHO router at present which benefits from its strong network function. This article studies on the way to monitor the users’online activity by capturing the flow over the router based on Netfilter.