Thanks for your reply Chris. Yeah you're right, Squid should be setup as either proxy or accelerator. I believe that this thing that I'm trying to accomplish hasn't been done yet (with Squid anyway). But this traffic that I'm trying to capture is not directed to our webservers but to anywhere in the Internet. We just want to track which websites our customers are visiting for records purposes. If you know of any application/software that can accomplish this, I would be most grateful. Edward > On 2/27/07, Edward C. Jakosalem <list@xxxxxxxxxxxxxxxxx> wrote: >> Sorry about the lack of details. >> Anyway, my sole purpose in running this server is to just capture our >> customers' browsing activities. I don't care about caching. I just need >> a >> log of only the _requests_ containing the date/time, the customer's IP >> address and the site visited. >> So what we did first on our router was we mirrored the active port to an >> unused one, then connected this one to the server. So basically this >> port >> that my server is connected to has no IP address. The gigabit interface >> of >> course I assigned only a private IP. >> Now when I do a tcpdump on this interface, I can see packets coming in. >> Squid just doesn't capture them. And the reason I believe is that my >> squid >> is not configured properly to do this. > > I may be incorrect, but Squid is a proxy which means that it must be setup > thus: > > <Client>----<Squid>----<Server/Internet> > > If you are not going to use squid as a proxy or accelerator, it would > seem better to track browsing habits via your webserver's access log. > > Somebody can correct me if I am wrong. I'm still on the learning curve > of squid myself. > > Chris >
