The way I do it: forward ports 80 & 443 to Squid and then report on it with Sarg - which is then published to an internal web server. The problem w/ straight netfilter data was that it contained too much - I don't care about SYN versus RST (in my web usage reports) - just tell me who went where and when they went there. Sarg web reports are management-friendly too...you won't have to give him the executive summary ;-\ ----- Original Message ----- From: "Patrick Ahler" <patrick@xxxxxxxxx> To: "netfilter EMAIL" <netfilter@xxxxxxxxxxxxxxxxxxx> Sent: Tuesday, April 15, 2003 1:04 PM Subject: RE: Packet Sniffing > Know of any good packet sniffer's? tcp dump with Ethereal is great, but is > it possible to set up reports from that? I need software that will be able > to print a report of who was looking at what web pages... and then be able > to print out weekly reports for each employee or "IP waster" as I call them > =). The boss is tired of employees lookin at porn during work =). > > Thanks, > Patrick > > >
