Re: [fwAnalog] fwanalog to chart outgoing web traffic

From: Balázs Bárány (balazs~AT~tud.at)
Date: Fri Jun 11 2004 - 15:40:21 CEST

• Next message: Steven Schnee: "[fwAnalog] Fwanalog on Watchguard Firebox"
• Previous message: Mike Sassaman: "[fwAnalog] fwanalog to chart outgoing web traffic"
• In reply to: Mike Sassaman: "[fwAnalog] fwanalog to chart outgoing web traffic"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

Hi,

• Mike Sassaman <msassaman~AT~strategictele.com> [2004-06-10 19:54]:
  > and from there I would like fwanalog to be able to chart the outgoing
  > web surfing traffic from my LAN, broken down per private IP, showing
  > destination website address.
  You get only the IP addresses of the target hosts from iptables. As sometimes hundreds of sites are hosted on one IP, it is pointless to reverse-lookup those addresses (and it's not even possible with fwanalog/analog).

You won't reach your goal with a firewall-based solution. You could use a transparent proxy like squid and then use a log analyzer for that, and it will tell you exactly what you want to know.

Regards

-- 
_________________________________________________________________________
Balázs Bárány       balazs~AT~tud.at        http://tud.at       ICQ 10747763

A good engineer will make considerable effort to avoid additional effort.

• Next message: Steven Schnee: "[fwAnalog] Fwanalog on Watchguard Firebox"
• Previous message: Mike Sassaman: "[fwAnalog] fwanalog to chart outgoing web traffic"
• In reply to: Mike Sassaman: "[fwAnalog] fwanalog to chart outgoing web traffic"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

This archive was generated by hypermail 2.1.5 : Wed Jul 07 2004 - 22:22:03 CEST