RE: [squid-users] w2k lan

From: Robert Adkins <raa@dont-contact.us>
Date: Thu, 18 Jul 2002 15:44:00 -0400

Kasper,

        I take it that you would like to identify which employees are surfing to
what web-sites. A good method of performing this task is to setup squid
to require authentication. This still has issues since people could
theoretically hop on another person's workstation or "steal" passwords
and surf as someone else. Which would still happen if you looking only
for IP Addresses.

        The good thing about setting up authentication is that it logs both the
IP address of the machine and also the username associated with the
request.

        Here is an example from the access.log on my squid server:

1022701533.174 265 192.168.254.14 TCP_MISS/200 2377 GET
http://www.harley-davidson.com/css/hd1_dkgrey.css jdoe DIRECT/64.73.40.50
text/css
1022701535.098 687 192.168.254.14 TCP_MISS/302 576 GET
http://www.harley-davidson.com/selector.asp? jdoe DIRECT/64.73.40.50
text/html
1022701535.397 138 192.168.254.14 TCP_MISS/200 768 GET
http://www.harley-davidson.com/css/hd1_launch.css jdoe DIRECT/64.73.40.50
text/css
1022701535.414 16 192.168.254.14 TCP_IMS_HIT/304 226 GET
http://www.harley-davidson.com/includes/Dispatcher.js jdoe NONE/-
application/x-javascript
1022701535.762 313 192.168.254.14 TCP_MISS/200 3215 GET
http://www.harley-davidson.com/includes/layerlib.js jdoe
DIRECT/64.73.40.50 application/x-javascript

        As you can tell from the above log; JDOE has visited the Harley-Davidson
web-site and is using the PC with the address of 192.168.254.14

        The only other thing that I could suggest would be to use the reserved
IP feature in Windows 2000 Server's DHCP settings. I have never used the
DHCP service in Windows 2000 before, but I have read a little something
about it and it was mentioned in another list that I have read somewhere.

Regards,
Robert Adkins
IT Manager/Buyer
IMPEL Industries, Inc.

 -----Original Message-----
From: Kasper [mailto:kasper@swebase.com]
Sent: Thursday, July 18, 2002 9:05 PM
To: mailinglistsquid-users@squid-cache.org; squid-users@squid-cache.org;
Robert Adkins
Subject: [squid-users] w2k lan

   

i have a windows lan that get ip from a dhcp server.
is there anyway to get a log with the windows computer name so we can log
each seperate computer when they surf through the squid proxy???

/kk
                 
Received on Thu Jul 18 2002 - 13:46:45 MDT

This archive was generated by hypermail pre-2.1.9 : Tue Dec 09 2003 - 17:09:18 MST