Is there a way to log outbound connections to a specific port (80)? CentOS 4.6. iptables? Thanks Tony Schreiner Boston College
On Tue, Feb 05, 2008 at 11:56:48AM -0500, Tony Schreiner wrote:> Is there a way to log outbound connections to a specific port (80)? > CentOS 4.6. > > iptables? >iptables -A OUTPUT -p tcp --dport 80 -j LOG --log-prefix "WWW " You might want to tack --syn on there as well to only log the packet initiating the connection instead of packets for the whole stream. Ray
Tony Schreiner wrote:> Is there a way to log outbound connections to a specific port (80)? > CentOS 4.6.assuming you want to log user web browsing traffic, configuring a Squid transparent proxy at your network border would be the best way. its logfiles are quite similar to those of a webserver, so you can use a wide range of log analysis tools.