LinuxQuestions.org
Welcome to the most active Linux Forum on the web.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Newbie
User Name
Password
Linux - Newbie This Linux forum is for members that are new to Linux.
Just starting out and have a question? If it is not in the man pages or the how-to's this is the place!

Notices

Reply
 
Search this Thread
Old 07-24-2008, 03:39 PM   #1
revinking
LQ Newbie
 
Registered: Jul 2008
Posts: 7

Rep: Reputation: 0
Can SQUID log skype calls,voip,chat programs in access.log


I have been playing on Squid for the past two weeks. I got transparent mode up and running. I have two networks in LAN: 192.168.1.0, 10.0.0.0.

How do i make these two networks pass thru my Squid machine??

Can squid log ftp downloads,chat programs,skype voip calls??

How do i monitor the bandwidth usage per IP address in access.log??

How to monitor file downloads by size and IP address??

Are there any good GUI based tools to monitor access.log??

Basically i need both LAN n/w to pass thru transparent squid box with 2 LAN ports to router for loging and monitoring. I also have incoming traffic but can you detail on how to let incoming access into my network on any port?? Should i use iptables?? commands??

eth0 is connected to internet 10.0.0.2 router
eth1 to lan 192.168.1.0

I would also like to know wat gateway to set for eth1??

I would be really thankful if somebody could take some time to help me out.

Thnak you so much in advance.
 
Old 07-25-2008, 06:52 AM   #2
skuzye
Member
 
Registered: Jul 2008
Location: São Paulo - Brazil
Distribution: Fedora 17
Posts: 97

Rep: Reputation: 15
As I don't know the answer for all your questions (and there are not just a few), I will only answer the ones I know.

But before that, you should tell us in which network your squid machine is working in :P

Quote:
How do i make these two networks pass thru my Squid machine??
Yes. Set router to use squid as proxy.
Quote:
Can squid log ftp downloads,chat programs,skype voip calls??
As far as I know, squid would only log packets that pass through it. It means that it will log everything you will need, but unfortunately for you it won't be readeable so easily...

Quote:
eth0 is connected to internet 10.0.0.2 router
eth1 to lan 192.168.1.0

I would also like to know wat gateway to set for eth1??
Please, can you translate to English?


By the way, welcome to the community, I hope you're not one of them that comes to ask help and disappear, are you?
 
Old 07-25-2008, 02:17 PM   #3
revinking
LQ Newbie
 
Registered: Jul 2008
Posts: 7

Original Poster
Rep: Reputation: 0
Squid proxy is 192.168.1.122

HI. thanks for ur reply. My squid box is 192.168.1.122. My first router is 192.168.1.1 which connects to 10.0.0.2 router to ISP. Therefore if i want to chuck the first router and replace it with SQUID box i ll need to configure 2 LAN cards but i am doubtful abt setting gateway address.

eth0: 10.0.0.1
gw: 10.0.0.2

eth1: 192.168.1.122
gw: 10.0.0.2

Are the above settings rite? Should i use iptables to NAT from eth0 to eth1?

How do i let thru both incoming and outgoing connections thru squid so that i can log incoming connections as well? shud i use Iptables again?

I have seen only HTTP traffic in my access.log? how do i log FTP downloads,voip protocols etc?? Please help me in this regard.

I hope you are clear with the settings now.

Thank you

Last edited by revinking; 07-25-2008 at 02:21 PM.
 
Old 07-25-2008, 02:20 PM   #4
Tinkster
Moderator
 
Registered: Apr 2002
Location: in a fallen world
Distribution: slackware by choice, others too :} ... android.
Posts: 22,986
Blog Entries: 11

Rep: Reputation: 880Reputation: 880Reputation: 880Reputation: 880Reputation: 880Reputation: 880Reputation: 880
Quote:
Originally Posted by revinking View Post

I have seen only HTTP traffic in my access.log? how do i log FTP downloads,voip protocols etc?? Please help me in this regard.
You can't. That's something for iptables' log or ulog target,
not for an application level proxy. All you'll see in squid is
http (and ftp if you set it up like that).
 
Old 07-25-2008, 05:15 PM   #5
skuzye
Member
 
Registered: Jul 2008
Location: São Paulo - Brazil
Distribution: Fedora 17
Posts: 97

Rep: Reputation: 15
I think you have to set you're first network interface this way:

Quote:
ip: 10.0.0.2
gw: 10.0.0.1 (don't forget to set your router to 10.0.0.1)
and the second one:

Quote:
ip: 192.168.1.1 (so it take places where you're first router was)
gw: 10.0.0.2 (and takes the traffic from the other network interface)
Skuzye
 
Old 07-27-2008, 08:38 AM   #6
revinking
LQ Newbie
 
Registered: Jul 2008
Posts: 7

Original Poster
Rep: Reputation: 0
full report by user and application of all incoming and outgoing internet traffic.

How to get full report by user and application of all incoming and outgoing internet traffic from squid access.log. Applications like skype, voip,chat programs

thanks
 
Old 07-27-2008, 01:14 PM   #7
Tinkster
Moderator
 
Registered: Apr 2002
Location: in a fallen world
Distribution: slackware by choice, others too :} ... android.
Posts: 22,986
Blog Entries: 11

Rep: Reputation: 880Reputation: 880Reputation: 880Reputation: 880Reputation: 880Reputation: 880Reputation: 880
As I said above: you can't. Squid is a web-proxy, you'll
get http and web-traffic at best. To be able to do what
you're after you'll need to get nufw or something the like
(which gives you a breakdown per individual since it requires
authentication) or you'll have to use iptables ulog and be
content with accounting per IP address.

Re-requesting the same (impossible) thing won't make it
achievable. That's like saying how do I get my BMW to
fly ... ain't happening (at least not w/o serious money,
time and effort - same with squid).


Cheers,
Tink
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
convert LAN IP address to Host Name when I give cmd tail -f /var/log/squid/access.log rs15 Linux - Networking 6 01-22-2012 01:45 AM
New SQUID user: How to clear the "access.log" and "store.log" automatically? yuzuohong Linux - Networking 2 12-02-2006 05:37 AM
client ip in squid access.log pavangogineni Linux - Security 1 10-23-2006 06:01 PM
My squid won't fill /var/log/squid/access.log linuxlah Linux - General 5 10-06-2003 10:51 PM
Squid access.log files davebarnes Linux - Networking 1 10-27-2002 04:05 PM


All times are GMT -5. The time now is 01:46 AM.

Main Menu
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration