[EMAIL PROTECTED] wrote on 01/12/2004 04:19:04 PM:

> If "who" means source IP address and "where" destination IP address, then
> just add rules to your router's firewall rulesets to log all outgoing
> packets to, and incoming packets from, ports 80 and 443. This won't get
> everything, since Web servers can run on non-standard ports, but it will
> give you a basic log of most Web traffic (one meaning of "usage").


That would work, but I would prefer HTTP-layer info: full URL's, for example.

> If you want more details than this ... for example, if you want the actual
> URLs logged, not just the IP addresses ... then a proxy server is the usual
> way to go. I seem to recall that Squid can run in a non-caching mode, but I
> do not remember the specifics. In any case, that is application-layer info,
> not normally recorded by routers and firewalls, which work at the network
> and transport layers, almost entirely.


And that's why I was considering Squid. It seems that for transparent proxying, you need Squid to be compiled with certain switches. I have yet to find a LEAF Squid compiled in this way, and I don't have a LEAF compile environment.

This is for Bering (1.2).

Thank you for the information!

Tim Massey



-------------------------------------------------------
This SF.net email is sponsored by: Perforce Software.
Perforce is the Fast Software Configuration Management System offering
advanced branching capabilities and atomic changes on 50+ platforms.
Free Eval! http://www.perforce.com/perforce/loadprog.html
------------------------------------------------------------------------
leaf-user mailing list: [EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user
SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html

Reply via email to