Re: [squid-users] Squid as Network Monitor

From: jeffrey j donovan <donovan_at_beth.k12.pa.us>
Date: Tue, 10 Jan 2012 07:54:07 -0500

On Jan 10, 2012, at 6:37 AM, Babelo Gmvsdm wrote:

>
> Hi,
> I have built a machine with a Squid, with lightsquid, and i would like to use it just like a network monitor.
> So I plugged the ETH1 of the PC on a cisco switch on a port that received each traffic send to the internet.
> the squid is started. (transparent mode)the ip forward is set to 1I have put this iptables rule: iptables -t nat - A PREROUTING -i eth1 -p tcp --dport 80 -j REDIRECT --to-port 3128
> but the access.log does not populate, whereas on Ntop, on the same machine, I see a lot of traffic (http)
> Something weird is the command iptables -L -t nat -v , shows no match for the rule created.
> First I think that ntop could intercept the traffic, but stopping it did not helped?
> Thanks for your future help.
> Herc.

check permissions on the log files and verify the correct log file directory.

ls -la /usr/local/squid/var/logs/

issue a squid -k rotate
-j
Received on Tue Jan 10 2012 - 12:54:09 MST

This archive was generated by hypermail 2.2.0 : Tue Jan 10 2012 - 12:00:02 MST