Squid with IP/User monitoring

michelle02012007 · 03-28-2009, 05:34 AM

Hi gurus,
I like to know what sites is the IP/user is browsing using my setup squid proxy in my rhel box. Or so called. monitoring IP/user internet usage.
Can anyone help me? I already have a running squid proxy.

TY,
Michelle

Stefan J · 03-28-2009, 07:58 AM

Hi Michelle

I use Dansguardian with squid to control and monitor web access, it logs every http request by user ip and site address. Various white and black lists are used to control user access to the web.

http://dansguardian.org/

Hope this helps

Stefan

anomie · 03-30-2009, 10:32 AM

Quote:

Originally Posted by michelle02012007

I like to know what sites is the IP/user is browsing using my setup squid proxy in my rhel box.

Are squid's access logs not sufficient?

lucianosousa · 03-30-2009, 12:18 PM

Quote:

Originally Posted by michelle02012007

Hi gurus,
I like to know what sites is the IP/user is browsing using my setup squid proxy in my rhel box. Or so called. monitoring IP/user internet usage.
Can anyone help me? I already have a running squid proxy.

TY,
Michelle

i like a Sarg - Squid Analysis Report Generator.
http://sarg.sourceforge.net/sarg.php

anomie · 03-30-2009, 07:48 PM

Quote:

Originally Posted by lucianosousa

i like a Sarg - Squid Analysis Report Generator.

Good suggestion -- I checked the project page / example reports. Pretty nice.

If that's the sort of info OP is looking for, I also recommend taking a look at calamaris. Using the -R option you can see reports on which sites each client is visiting.

michelle02012007 · 04-02-2009, 10:34 AM

Quote:

Originally Posted by Stefan J

Hi Michelle

I use Dansguardian with squid to control and monitor web access, it logs every http request by user ip and site address. Various white and black lists are used to control user access to the web.

http://dansguardian.org/

Hope this helps

Stefan

I'll try to check this.
Is it free?
Thanks Stefan!

michelle02012007 · 04-02-2009, 10:36 AM

Quote:

Originally Posted by anomie

Are squid's access logs not sufficient?

hi anomie, i need to know what/who user/ip is accessing sites.

michelle02012007 · 04-02-2009, 10:37 AM

Quote:

Originally Posted by lucianosousa

i like a Sarg - Squid Analysis Report Generator.
http://sarg.sourceforge.net/sarg.php

Thanks lucianosousa!
I'll see what's fit to my requirements.

anima.palshikar · 12-01-2009, 03:34 AM

Give a thought to Cyberoam iView, I found it very good as per my requirement was concerned. It gives full fledged user based comprehensive reports in multiple formats.
It will give you in-depth visibility of Who is doing what in your network.

Have a look:
http://sourceforge.net/projects/cyberoam-iview/

Regards
Anima

dexterroot · 12-21-2009, 03:43 AM

I am using SARG for a few days and I like it. But I have a question about this: there is a way to generate a report in a specific time? Let's say I want in this moment to have a report generated, for the traffic made only for this day. Is this possible with SARG or should I look for something else?