Re: Unable log log mac address in Server

[Flashdown <flashdown@xxxxxxxxxxxxx>]

Hi Xavier,

it is a normal network behavior. The reason is we might believe that we use IP's in the local network. That of course is true, but in the local network the real end to end communication is done from & to MAC address (OSI Layer 2) when a IP-packet (layer 3) leaves the local network then target and source mac are unknown to the client and server. So they only know the IP's.

Am 9. Juni 2017 09:39:37 MESZ schrieb Arun Xavier <innovature.arun.xavier@xxxxxxxxx>:

Hi all,

I set up squid in 2 different environments.

One in my local network and One in aws ec2.

I am getting device mac address in local network, but I get 00:00:00:00:00:00 in aws.

Is it a network issue ? or Is does this works this way?

Squid Version Details:

squid -v

Squid Cache: Version 4.0.19-20170508-r15031

Service Name: squid

Ubuntu linux

configure options:  '--prefix=/usr' '--localstatedir=/var' '--datadir=/usr/share/squid' '--sysconfdir=/etc/squid' '--libexecdir=/usr/lib/squid' '--with-swapdir=/var/spool/squid' '--with-logdir=/var/log/squid' '--with-pidfile=/var/run/squid.pid' '--with-default-user=proxy' '--enable-inline' '--enable-delay-pools' '--enable-cache-digests' '--enable-icap-client' '--enable-follow-x-forwarded-for' '--enable-eui' '--enable-esi' '--enable-icmp' '--enable-zph-qos' '--enable-ecap' '--disable-translation' '--with-filedescriptors=65536' '--with-large-files' '--with-openssl' '--enable-ssl' '--enable-ssl-crtd' '--enable-build-info=Ubuntu linux' '--enable-linux-netfilter'

Differences in Configuration file:

acl allnetwork src 0.0.0.0/0

http_access allow allnetwork

ssl_bump bump all

always_direct allow all

http_port 3128 ssl-bump generate-host-certificates=on cert=/etc/squid/cert/cert.pem key=/etc/squid/cert/key.pem

strip_query_terms off

logformat squid %{%Y-%m-%d,%H:%M:%S}tl.%03tu %6tr %>a %Ss/%03>Hs %<st %rm %ru %[un %Sh/%<a %mt %>eui

I have same configurations in both aws and local, but squid in aws fails to log mac addres.

What might be the reason ?

Regards

_______________________________________________
squid-users mailing list
squid-users@xxxxxxxxxxxxxxxxxxxxx
http://lists.squid-cache.org/listinfo/squid-users