LinuxQuestions.org
Visit the LQ Articles and Editorials section
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Networking
User Name
Password
Linux - Networking This forum is for any issue related to networks or networking.
Routing, network cards, OSI, etc. Anything is fair game.

Notices

Reply
 
Search this Thread
Old 07-26-2003, 03:14 AM   #1
vous
Member
 
Registered: Mar 2003
Location: Macondo
Distribution: Mandrake 9.1, 10.1, SuSE 8.1 pro, 10.1, Red Hat 8.0/9.0
Posts: 380

Rep: Reputation: 30
Where does linux log all the browser request activity?


Hello All,

How can I check all the internet traffic that I generate? For example, where does the system log all the browser request activity?
 
Old 08-22-2003, 08:19 PM   #2
rjliebenberg
LQ Newbie
 
Registered: Jul 2003
Location: Los Angeles
Distribution: CentOS
Posts: 14

Rep: Reputation: 0
You would have to set it up, as far as I know outbound logging is not setup by default. try running this command then checking your logs.

iptables -A OUTPUT -j LOG
tail -f /var/log/messages

You should see all the outbound traffic on the machine. Make sure you have room in /var if you leave this running it will probably generate a lot of data.

Last edited by rjliebenberg; 08-22-2003 at 08:24 PM.
 
Old 03-17-2011, 02:30 PM   #3
alftavay
LQ Newbie
 
Registered: Mar 2011
Posts: 4

Rep: Reputation: 0
logging requests

My question is the same as the one starting this thread. I tried the above solutions and it gave me the package level data. But i actually want to log all http requests including POST data. And i want the entire request line including the address (before it's translated to a numeric address).
Thanks ...
 
Old 03-17-2011, 03:24 PM   #4
agentbuzz
Member
 
Registered: Oct 2010
Location: Texas
Distribution: Debian, Ubuntu, CentOS, RHEL
Posts: 118

Rep: Reputation: 22
HTTP GET and POST requests

If you want to see all URLs in the Firefox cache, there is a directory in your home directory ".mozilla/firefox". Inside that is a Cache directory with lots of files, some gzip compressed, some JPEGs, some in another format. So, if you want to see the contents of those files, You'd do something like this:

Code:
$ zcat .mozilla/firefox/etlltonne.default/Cache/FFC94D43d01
or

Code:
$ zcat .mozilla/firefox/etlltonne.default/Cache/00C94D43d01 | strings
or

Code:
$ file .mozilla/firefox/etlltonne.default/Cache/F0B4DEACd01
.mozilla/firefox/etlltonne.default/Cache/F0B4DEACd01 JPEG image data, JFIF standard 1.02
for the cache files that contain binary data.

If you want something more, you should install squid, enable one or more of the logs (for cache, access, MUA, and/or referer) and point your browser to the squid.
 
Old 03-19-2011, 10:39 AM   #5
markfox
LQ Newbie
 
Registered: Jul 2010
Posts: 19

Rep: Reputation: 1
If Squid isn't an option, you could do this by using iptables, the l7-filter, and writing your own l7-filter pattern to match HTTP GETs. Basing the pattern off of the existing http pattern would make this fairly straight-forward.

If performance is an issue, you may want to filter out (ie. accept) HTTP traffic that obviously isn't a GET, such as large packets.

I'm looking to log all HTTP requests originating on our networks (ie. so that we can determine who was surfing for what if need be) and the above occurred to me as a potential solution.
 
Old 03-19-2011, 02:09 PM   #6
gardenair
Member
 
Registered: Oct 2004
Location: LH
Posts: 578

Rep: Reputation: 31
well what are 17 filter can u explain it ?
Thanks
garden
 
Old 03-21-2011, 05:05 AM   #7
alftavay
LQ Newbie
 
Registered: Mar 2011
Posts: 4

Rep: Reputation: 0
I found that the Firefox cache contains entire downloaded documents, not just their addresses. I'll see if I can work with that. The "I7" filter for iptables isn't one of the filters included with it, correct? So regarding iptables and especially squid, it might take me a while to work through your suggestions. I will post as necessary. Thanks ...
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
activity log linuxhippy Slackware 5 11-16-2005 07:55 PM
how to log port activity irfanhab Linux - General 4 06-18-2005 01:07 AM
which log gives me info about internet activity? dr_zayus69 Linux - Newbie 7 12-03-2004 06:14 PM
suspicious log activity hoedad Linux - Newbie 3 07-26-2004 08:33 AM
How to Log eth0 activity? Noffy Linux - Networking 1 03-04-2002 05:26 PM


All times are GMT -5. The time now is 02:58 AM.

Main Menu
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration