Date: Mon, 15 Dec 1997 20:46:15 +0000 From: Brian Somers <brian@awfulhak.org> To: "Joe \"Marcus\" Clarke" <jmcla@ocala.cs.miami.edu> Cc: FreeBSD User Questions List <freebsd-questions@freebsd.org> Subject: Re: Alias logging Message-ID: <199712152046.UAA09612@awfulhak.demon.co.uk> In-Reply-To: Your message of "Mon, 15 Dec 1997 06:37:16 EST." <Pine.SGI.3.96.971215063334.23514A-100000@ocala.cs.miami.edu>
next in thread | previous in thread | raw e-mail | index | archive | help
> Okay, this may seem like a simple question, but it's late here, and my
> brain is not operating at 100%. I figure someone out there in the world
> may be seeing this in mid-afternoon...I want to track which machines
> from my internal network use the Internet. I don't have a firewall as I
> am using user ppp's packet filtering feature, and my internal network is
> a fake subnet anyway. So here's an example:
>
> I am a user that gets on Netscape from my Mac, and goes and looks at a
> page. User mode ppp receives the request, masquerades the incoming IP,
> and forwards the packets. Is there a way I can log where that user went
> and at what time? Thanks.
I'd tend to build in a real firewall and use the `ipfw ... log ...'
feature, or even use tcpdump - both on your internal interface.
You can get more control that way. Ppp itself can log this stuff,
but it's an ``all or nothing'' scenario so you'd need *lots* of disk
space and it'd probably take some time to parse to get your stats out.
> Joe Clarke
>
--
Brian <brian@Awfulhak.org>, <brian@FreeBSD.org>, <brian@OpenBSD.org>
<http://www.Awfulhak.org>;
Don't _EVER_ lose your sense of humour....
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?199712152046.UAA09612>