RE: Logging through Web

From: Jan Simek[SMTP:xsimekj@sun.felk.cvut.cz]
Sent: Friday, 3 April 1998 9:20
Subject: Re: Logging through Web

With Apache you can put such a line into httpd.conf to get the
HTTP_X_FORWARDED_FOR header. Instead of (or together with) standard Common
Log Format which looks like:

TransferLog logs/normal_clf_log "%h %l %u %t \"%r\" %s %b"

You'd use:

CustomLog logs/test_log "%h %{X-Forwarded-For}i %l %u %t \"%r\" %s %b"

I will keep this as a FAQ-able piece of information.

That's all...
Still keep in mind you only catch Squid users...

Not true. Our corporate proxy is running Netscape Proxy, and it also
returns headers. We've been able to "trap" users that are using the other
proxy instead of our local one, or those have their browser proxy
configuration mucked up.

P.S.: If you haven't got Apache, then you can't do this (as far as I
know...).

With a few hacks, any source-code distributed server could be modified.
It's a question of time, money and desire.

Jason

begin 600 winmail.dat
M>)\^(B8'`0:0"``$```````!``$``0>0!@`(````Y`0```````#H``$(@`<`
M&````$E032Y-:6-R;W-O9G0@36%I;"Y.;W1E`#$(`06``P`.````S@<$``,`
M```-````!0#N``$@@`,`#@```,X'!``#``(`.0`D``4`0`$!"8`!`"$````S
M0S<R.38T.41"0T%$,3$Q.4(P.#`P,#!&.#`S-3@P,0#N!@$$@`$`&````%)%
M.B!,;V=G:6YG('1H<F]U9V@@5V5B`!<(`0V`!``"`````@`"``$#D`8`'`<`
M`"$```!``#D``%:A*[]>O0$#`#8```````,`)@``````'@!P``$````4````
M3&]G9VEN9R!T:')O=6=H(%=E8@`"`7$``0```!L````!O5Z-=3;YZVV,RG01
MT9J.`*`DHZ?'``>%B<$`'@`Q0`$````5````05535$Q!3BU!55-44$\M3UI-
M-#0``````P`:0``````>`#!``0```!4```!!55-43$%.+4%54U103RU/6DTT
M-``````#`!E```````L`!0``````"P`U```````+``8,``````L`%PP`````
M"P`"#``````"`0D0`0```,L#``#'`P``2`4``$Q:1G4WJS-RAP`*`0T#0W1E
M>'0!]_\"I`/D!>L"@P!0`O,&M`*#)C(#Q0(`8V@*P'-EV'0P(`<3`H!]"H`(
MSS\)V0*`"H0+-Q+"`=`@1DT#83H#,`&1($H#D5,!!W%K6U--5%`Z!G@`D!CA
M:D!S=6X`+F9E;&LN8W;D=70:<'I="J,*@`9@!P(P&!47T&ED87DL-"`S$^!P
M!1`#(#$Y8#DX(#DZ#`$;%75,8FH%D!NF4F48$$P(;V=G"X!G('1H@0-@=6=H
M(%=E##!S&Q0;!5=I'\`<L0#0:$AE('D(8"!C`Y%P#1J@(!GP$V`@82!LAPN`
M(?`+@'1O(&@"0&QP9!IP`B!F'[`CP&=/$[`?L2'P&P5(5!E`7P!87T9/4E=!
M4IA$140F$B/096$$@3@N($D`@`[P)R`@;_TD<"@%L2.P),$AX`7``_!M'\`I
M(L`!D&X<4`L@(/T(4&T$8`.A&Q0?01?`!;!C`,`%0'=H:2+Q%-!O-FL$("-`
M:Q\0('Q4<AL`<1HP<BK2%-!G<R\";BLB;%]C;&9?42XQ("(E("`E`R`EU2(P
M)05!7"]P<C!!+Z!1!"`E8B(@?%D(8"=M)^!U$Z`LC4,R<".P;0\M]P[P)Z`O
M*%Q[6"T=*Q%W"Q$)@#627'UIUR^O,+\;(TDH\6P#("Q@?&5P'[$$`",0.@$7
MP$%442T!H&PA\'`(D&-?(?`H`0N``A`K,FD"("ZS+)T3<'0G.@$Y4"X]T,\;
M!CP`.58+@"!M"X`GX%,B$@(@;'DB070B\5-\<74<0#)B$Y`]V!L%3IIO).%R
M"E`G8"!/"'![(D`%L'`%L"M0.N$#8'AW0!`Y\4*@;@,`'Y$'P'3I!/!A<"'P
M4$/R'(`I@;<C@`5`!T!S(\`50'0(<)\&,2<$03!"X"!`)W8A\-YB">$C$#K"
M([$B0I!%0/\WL$#S'[$K40K`(?`R<!^$_SM!*+-#Y2>8"&$KT2)0`R#-`B!E
M'(`H0FAO$Z`CT%9A2`$E`6D%P&(#8'?G00%#U21":6<(<#OS/T`7(N`L8#)1
M<#Q-4"Y3.BX8$$DD<"(23?)N)_T%0&="82&D'(`E`0.@(A6M4P%D(\`YTR@Z
M(68*P5<Z(3D0)39K+H!W/=$I?SQ-(5,C(!HP!^`3<%"`<]]%TD`01H`(<#LP
M+06@`0#G5-`$`$*0:6(:H%"A00'S2`!#(G5L)^!(,#]`!'"O!I`(D"0@0N!)
M/6,@0*!_-)%0(B@!/``'@!R`*B%E_T`01?(!``"0%4`\31B`1H`+"Y!76WUA
M<`!``$@``%:A*[]>O0$"`?D_`0```&``````````W*=`R,!"$!JTN0@`*R_A
M@@$`````````+T\]551#+T]5/4]44T=004](42]#3CU-4R!-04E,(%)%0TE0
M245.5%,@,2]#3CU!55-43$%.+4%54U103RU/6DTT-``>`/@_`0```!$```!!
M<FUI<W1E860L($IA<V]N`````!X`.$`!````%0```$%54U1,04XM05535%!/
M+4]:330T``````(!^S\!````8`````````#<IT#(P$(0&K2Y"``K+^&"`0``
M```````O3SU55$,O3U4]3U131U!!3TA1+T-./4U3($U!24P@4D5#25!)14Y4
M4R`Q+T-./4%54U1,04XM05535%!/+4]:330T`!X`^C\!````$0```$%R;6ES
M=&5A9"P@2F%S;VX`````'@`Y0`$````5````05535$Q!3BU!55-44$\M3UI-
M-#0`````0``',!"M42K67KT!0``(,+#4CBK67KT!'@`]``$````%````4D4Z
M(``````>`!T.`0```!0```!,;V=G:6YG('1H<F]U9V@@5V5B``L`*0``````
M"P`C```````#``80AC0T_P,`!Q```P```P`0$``````#`!$0`````!X`"!`!
M````90```$923TTZ2D%.4TE-14M33510.EA324U%2TI`4U5.1D5,2T-6551#
M6E-%3E0Z1E))1$%9+#-!4%))3#$Y.3@Y.C(P4U5"2D5#5#I213I,3T='24Y'
75$A23U5'2%=%0E=)5$A!4$$`````R=X=
`
end
Received on Fri Apr 03 1998 - 00:15:34 MST