On 13/04/2011 12:48, Amos Jeffries wrote:
> On 13/04/11 21:11, Klaus Darilion wrote:
>> Hi!
>>
>> For debugging of certain http clients I need to log the whole HTTP(S)
>> traffic passed through squid, i.e. complete HTTP request and the HTTP
>> response (all headers and bodies).
>>
>> I read lots on the wiki and it seems like SslBump and DynamicSslCert
>> will help to break the SSL connection. But I did not found a feature in
>> Squid to log the content to a file. Is there such a feature in Squid?
>>
>> If not, I guess I could use ICAP to forward the content to an ICAP
>> server. Does anybody know an ICAP server which just dumps the whole
>> content to disk?
>>
>> Thanks
>> Klaus
>
> Squid is designed not to do anything with the content but pass it on
> as fast as possible. So that is a no to your first question.
>
> As for the second, I've not heard of an ICAP server. But you want to
> look at the eCAP help areas for more details. There are people doing
> it or similar with eCAP.
>
free and opensource icap server is GreasySpoon at
http://greasyspoon.sourceforge.net/
but if it certain clients you can might setup specific parent proxy for
this purpose as parosproxy.
it's not suppose to be as fast as squid but built for http\s traffic
interrogation.
Eliezer
> The easier way though is with a pcap/tcpdump packet dump.
>
> Amos
Received on Wed Apr 13 2011 - 10:23:55 MDT
This archive was generated by hypermail 2.2.0 : Wed Apr 13 2011 - 12:00:03 MDT