I regularly see in the log that HTTP traffic to these IPs
- 104.16.89.188
- 104.16.90.188
- 104.16.91.188
- 104.16.92.188
- 104.16.93.188
is there a way to redirect these packets through the squid-proxy running
on the router?
or any other way to get to know what is causing these traffic?
Thanks,
Walter
What you're looking for is called a transparent proxy. Knowing that you
can search the web for instructions.
Another way is to capture packets with dumpcap and look at the capture
file in wireshark.
If you have access to the client device while the connection is open you
can also use lsof to see which program is making the connection, e.g.:
lsof | grep TCP
--
To unsubscribe from this list: send the line "unsubscribe netfilter" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
