[squid-users] getting dhcpd client-hostname (or other name) in access log

From: Nick Bartos <spam@dont-contact.us>
Date: Mon, 7 Jul 2003 14:09:50 -0500 (CDT)

I have several small sites that would like to be able to monitor user's
access. The problem I am running into is that most of them do not want to
have the user enter a password when the browser opens up. Doing it by IP
normally would not be all that bad since it can be tracked down to an
individual machine, but since most of these sites will be using dhcp they
may change and can not easily be relied apon.

I am looking into writing some sort of plugin/mod that will query dhcpd
and get the client-hostname for an ip address and somehow insert that into
the log. I am wondering if anyone else has attempted this or has
suggestions. I thought about doing it via a cron job or from a monitoring
program, but unless it runs every minute or so I am getting into a higher
percentage for error since it would not be known when the ip address was
changed. I wrote a plugin for ulogd (for iptables) that did a similar
thing by querying dhcpd to get the client-hostname (and mac address too)
for the ip address. I would reuse the dhcp code from this if needed.

I thought about writing an auth plugin, but after more research I don't
think I could disable the request for auth on the client, and it doesn't
look like I have the ability to return an actual name and get it into the
logs, so that probably won't work.

I thought about modifying the custom log patch and adding options for a
hostname field, but I was hoping there may be some other options.

Ideas?
Received on Mon Jul 07 2003 - 13:09:50 MDT

This archive was generated by hypermail pre-2.1.9 : Tue Dec 09 2003 - 17:17:52 MST