RE: [squid-users] Authentication & Logging

Luke,

Your access.log will look like:
999557121.252 42 172.26.10.4 TCP_MISS/304 224 GET
http://145.78.1.126/mrtg/amr06r01/amr06
r01.amr06_se0_0-week.gif ramox001 FIRST_UP_PARENT/relay.ptt-post.nl -
999557121.280 23 172.26.10.4 TCP_MISS/304 224 GET
http://145.78.1.126/mrtg/amr06r01/amr06
r01.amr06_se0_0-month.gif ramox001 FIRST_UP_PARENT/relay.ptt-post.nl -
999557121.318 25 172.26.10.4 TCP_MISS/304 224 GET
http://145.78.1.126/mrtg/amr06r01/amr06
r01.amr06_se0_0-year.gif ramox001 FIRST_UP_PARENT/relay.ptt-post.nl -
999557121.338 24 172.26.10.4 TCP_MISS/304 223 GET
http://145.78.1.126/mrtg/amr06r01/mrtg-
l.gif ramox001 FIRST_UP_PARENT/relay.ptt-post.nl -

Here you can clearly see that user: ramox001 is accessing the proxyserver to
see the router statistics generated by mrtg.

You can parce the access.log file at night to generate a nice report: how
long people were online, where they went etc: all generated in html format.

I use SARG, its available on http://web.onda.com.br/orso/

Peter

> -----Oorspronkelijk bericht-----
> Van: Robert Collins [mailto:robert.collins@itdomain.com.au]
> Verzonden: Tuesday, September 04, 2001 10:27 AM
> Aan: Luke Sheaves
> CC: squid-users@squid-cache.org; Hugh Blandford
> Onderwerp: Re: [squid-users] Authentication & Logging
>
>
> On 04 Sep 2001 16:48:21 +1000, Luke Sheaves wrote:
> > All,
> >
> > The FAQ seems to suggest that this can only be achieved by IDENT
> > lookups, but some people historically on the list have suggested
> > otherwise...in that the username that is used to authenticate is stored
> > in the access.log file for each URL.
>
> yes. ident and proxy auth both result in the username being stored in
> access.log. By default its stored in the same field, so any faq data for
> analyzing rfc 931 [ident] data , will work with proxy authentication.
>
> Rob
>
Received on Tue Sep 04 2001 - 02:36:37 MDT