On 13/04/2011 12:48, Amos Jeffries wrote:
On 13/04/11 21:11, Klaus Darilion wrote:
Hi!
For debugging of certain http clients I need to log the whole HTTP(S)
traffic passed through squid, i.e. complete HTTP request and the HTTP
response (all headers and bodies).
I read lots on the wiki and it seems like SslBump and DynamicSslCert
will help to break the SSL connection. But I did not found a feature in
Squid to log the content to a file. Is there such a feature in Squid?
If not, I guess I could use ICAP to forward the content to an ICAP
server. Does anybody know an ICAP server which just dumps the whole
content to disk?
Thanks
Klaus
Squid is designed not to do anything with the content but pass it on
as fast as possible. So that is a no to your first question.
As for the second, I've not heard of an ICAP server. But you want to
look at the eCAP help areas for more details. There are people doing
it or similar with eCAP.
free and opensource icap server is GreasySpoon at
http://greasyspoon.sourceforge.net/
but if it certain clients you can might setup specific parent proxy for
this purpose as parosproxy.
it's not suppose to be as fast as squid but built for http\s traffic
interrogation.
Eliezer
The easier way though is with a pcap/tcpdump packet dump.
Amos
