common log format doesn't capture that information... http://onlamp.com/pub/a/apache/2004/04/22/blackbox_logs.html?page=3
that said, of the A-P or PAT box which isn't under your control in all likelyhood anyway doesn't log the association of internal devices to external ports then knowing the source port may not tell you that much about which client you're talking to... joel Stephane Bortzmeyer wrote: > At the Transport Area meeting, Alain Durand, presenting > draft-ford-shared-addressing-issues mentioned that we may well have > now to always log the source port of a TCP request, not only the > source IP address (which may well be shared), if we want traceability. > > Does anyone know if it is possible with the typical TCP servers? For > instance, I find no way to do it with Apache > <http://httpd.apache.org/docs/2.2/mod/mod_log_config.html>. > _______________________________________________ > Ietf mailing list > Ietf@ietf.org > https://www.ietf.org/mailman/listinfo/ietf > _______________________________________________ Ietf mailing list Ietf@ietf.org https://www.ietf.org/mailman/listinfo/ietf
