Re: [squid-users] Squid and Mirrored Router Ports

> tis 2007-04-17 klockan 20:55 +1000 skrev Edward C. Jakosalem:
>
>> I have posted this same problem before but I want to post it again
>> because
>> I am pressured to make this work with Squid. I know that Squid's use is
>> either an accelerator or proxy or both. But we want Squid to _only_
>> capture web traffic and log them, that's all. As such, I have configured
>> my server to act as transparent proxy.
>
> I don't quite get what you are trying to do here.. Do you want Squid to
> act as a transparent proxy by intercepting port 80 traffic and have it
> redirected to Squid, or do you just want to audit the port 80 traffic
> without actually touching the packets by just listening on a switch
> mirror/monitor port?

I actully just need squid to act as transparent proxy so I can log
traffic. I don't care how squid will do this, I just need the logs. And
the reason why we use the mirrored port is that we don't want browsing
affected in case this server goes down.

>
> The first can be done by Squid, and any of the interception methods will
> work. WCCP, Policy routing etc..
>
> The second is not a job for Squid. You need a packet analyzer/auditor
> for this. There is quite many different ones depending on what you are
> looking for..

We specifically need the Squid log format that's why we want to make this
work with squid. My boss doesn't want it any other way. :-(

Thanks Henrik.
>
> Regards
> Henrik
>
Received on Tue Apr 17 2007 - 05:52:51 MDT