On Tue, Apr 17, 2007 at 09:52:46PM +1000, Edward C. Jakosalem wrote: > > > tis 2007-04-17 klockan 20:55 +1000 skrev Edward C. Jakosalem: > > > >> I have posted this same problem before but I want to post it again > >> because > >> I am pressured to make this work with Squid. I know that Squid's use is > >> either an accelerator or proxy or both. But we want Squid to _only_ > >> capture web traffic and log them, that's all. As such, I have configured > >> my server to act as transparent proxy. > > > > I don't quite get what you are trying to do here.. Do you want Squid to > > act as a transparent proxy by intercepting port 80 traffic and have it > > redirected to Squid, or do you just want to audit the port 80 traffic > > without actually touching the packets by just listening on a switch > > mirror/monitor port? > > I actully just need squid to act as transparent proxy so I can log > traffic. I don't care how squid will do this, I just need the logs. And > the reason why we use the mirrored port is that we don't want browsing > affected in case this server goes down. > > > > > The first can be done by Squid, and any of the interception methods will > > work. WCCP, Policy routing etc.. > > > > The second is not a job for Squid. You need a packet analyzer/auditor > > for this. There is quite many different ones depending on what you are > > looking for.. > > We specifically need the Squid log format that's why we want to make this > work with squid. My boss doesn't want it any other way. :-( > > Thanks Henrik. > > > > Regards > > Henrik > > > >
