Author Topic: Squid Logging (Read 7617 times)

kenchix1 · « **on:** April 13, 2004, 03:10:30 AM »

Now that squid is running smoothly and i can see the log of where users go, how/where do i monitor other services logs like ftp, yahoo messenger activities, webcam, email retrievals, etc ?

Thank you very much to mr. ricky and linuxsolved.com !

Ricky · « **Reply #1 on:** April 13, 2004, 07:42:52 AM »

What you are looking is probably. access.log and cache.log ,
if you have installed squid from rpm then it should be in /etc/squid/ somethign..
and if you installed from tar.gz ie source then it should be /usr/local/squid/etc/var/logs/
BTW.. there are lots for utilities in linux which can let you monitor ur network activity like.. nmap , ethereal and so on. see my other post for logging.

kenchix1 · « **Reply #2 on:** April 13, 2004, 11:07:25 AM »

all I can see from access.log are these kind of messages :

Code: [Select]

192.168.1.100 - - [13/Apr/2004:19:02:23 -0400] "GET http://rad.msn.com/ADSAdClient31.dll? HTTP/1.1" 200 712 TCP_MISS:DIRECT
192.168.1.100 - - [13/Apr/2004:19:02:24 -0400] "GET http://rad.msn.com/ADSAdClient31.dll? HTTP/1.1" 200 712 TCP_MISS:DIRECT
192.168.1.100 - - [13/Apr/2004:19:02:24 -0400] "GET http://h.msn.com/c.gif? HTTP/1.1" 304 282 TCP_MISS:DIRECT

no FTP, or yahoo messenger, or eudora, or sock activity logs, only HTTP requests.

thanks.

is there something wrong with my rc.nat ?

Ricky · « **Reply #3 on:** April 13, 2004, 11:20:11 AM »

I think you should rather go for some networking monitoring tools.. there are lots of them. as i told u earlier.. but access.log has almost every thing.. give a closer look