Site monitoring help needed

pinga123 · 05-07-2010, 06:27 AM

Hi
I have developed a website. Now i would like to monitor the IP address of machines who are accessing the server.
The simplest possible solution to this that comes first into my mind is to use jsp inbuilt tags.

Code:

<%
out.print( request.getRemoteAddr() );
out.print( request.getRemoteHost() );
%>

but it has given me some other IP address(May be a proxy server's ip address)

So i was left with one choice is to run netstat on host server .
Here is what i have done.

Code:

netstat -an | grep 8080 (As tomcat runs on port 8080).

Should i modify the command or there is any other way around to monitor the IP address?

carltm · 05-07-2010, 07:54 AM

The easiest way to do this is to look at the access logs.

Incidentally, if someone is using a proxy, the proxy address is all
you'll see. And if it is a caching proxy, you won't even know how
many hits were made to the proxy.

linuxlover.chaitanya · 05-07-2010, 07:59 AM

It is I guess even possible to get the addresses behind the proxy. I have seen some web sites collecting this data. One of my colleagues did that incidentally for one of our web applications.

ilikejam · 05-07-2010, 09:03 AM

You can sometimes (usually?) get the proxy-hidden IP by looking for the 'X-Forwarded-For' HTTP header in the request.

Dave

linuxlover.chaitanya · 05-07-2010, 11:56 PM

Exactly. But I would like to see if this field has been disabled in squid, will this still work?

John VV · 05-08-2010, 01:19 AM

i would install " awstats" and use it's output.

for the "hidden" ip's you can sett Apache to do a dns on EVERY call but there is a speed trade off .The site WILL get slow.