RE: [squid-users] Log Format

From: Jonathan Chretien <jonathan_chretien_at_hotmail.com>
Date: Wed, 18 Jun 2008 07:54:43 -0400

Hello.

It's exactly what I was thinking. There is not way with the Squid log to only get or extract the typed or click URL.

Doing what I did, like only extract TEXT/..... mime type purge a lot of thing that my HR department don't need to see.

Thanks

Jonathan

----------------------------------------
> Subject: Re: [squid-users] Log Format
> From: henrik_at_henriknordstrom.net
> To: jonathan_chretien_at_hotmail.com
> CC: squid-users_at_squid-cache.org
> Date: Wed, 18 Jun 2008 12:50:31 +0200
>
> On tis, 2008-06-17 at 16:37 -0400, Jonathan Chretien wrote:
>
> > Is there a way to purge the access log to get only the URL that the user requested when he clicked on a link or when he typed the address in the address bar ?
>
> There is no difference between clicking on a link or objects composing a
> page.
>
> But if the browser behaves you should be able to identify addresses
> typed in the url-bar by matching requests without a referer header, but
> that will most likely cut down the logs far too much to be usable.
>
> Consider this example that your HR most likely wants to know about:
>
> Someone sends an email with some really bad addresses to one of your
> users hotmail accounts.
>
> The user logs in on hotmail, gets realle excited about that email,
> clicks on the link and browses those pages for hours, gets infected by
> trojanst stealing all of you company internal trade secrets etc.
>
> In HTTP clicking on a link is no different than a page downloading an
> external ad banner.. both are references from that page, and both may
> contain text/html content, or other content..
>
> Regards
> Henrik

_________________________________________________________________
Received on Wed Jun 18 2008 - 11:54:50 MDT

This archive was generated by hypermail 2.2.0 : Wed Jun 18 2008 - 12:00:03 MDT