WWW Proxy/Traffic Analyzer

[Bachilo Dmitry]

В сообщении от Среда 10 января 2007 22:00 Tom Grove написал(a):
> We have an employee who spends quite a bit of time on the net and
> currently have no way of analyzing where they go.  Are there any decent
> proxy servers that I can put them on to see where they are going?
>
> -Tom
> _______________________________________________
> freebsd-questions at freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to
> "freebsd-questions-unsubscribe at freebsd.org"


Nothing can be easier.
You will have to recompile your kernel to be able to forward all traffic of 
your employees to squid, even if they don't use proxy in their browser. 
Compile it with Options IPFIREWALL_FORWARD
Then install squid and add a rule to a firewall like this: 
fwd 192.168.1.1,3128 tcp from any to any dst-port 80 via xl0
Where 192.168.1.1 is a router, 3128 - squid port and xl0 is an outer 
interface.
This will make all your network users go through squid and all their moves 
will be recorded. You will just need to install SARG, which will draw nice 
HTML tables with IPs and sites visited by them.

I use it myself and it works just fine. I also use squid to deny downloading 
of avi and mpeg files, and also to deny some sites that are not work-related 
and should not be visited from office.

Also Squid and SARG can count traffic, so you can see who spends how much, if 
you don' have an unlimited internet.

-- 
------------------------
С уважением, Бачило Дмитрий
Руководитель отдела системной интаграции
ООО "Компания Солинк"
--
With Best Regards, Bachilo Dmitry
Head of systems integration dept
Solink Company Ltd.