From owner-freebsd-stable Wed Jul 26 14:50:47 2000 Delivered-To: freebsd-stable@freebsd.org Received: from wodc7-1.corprelay.mail.uu.net (wodc7-1.corprelay.mail.uu.net [192.48.96.68]) by hub.freebsd.org (Postfix) with ESMTP id A470337BF64 for ; Wed, 26 Jul 2000 14:50:40 -0700 (PDT) (envelope-from dkrapf@UU.NET) Received: from npiserve0.corp.us.uu.net by wodc7mr1.ffx.ops.us.uu.net with ESMTP (peer crosschecked as: npiserve0.corp.us.uu.net [153.39.201.152]) id QQizoh12313 for ; Wed, 26 Jul 2000 21:50:36 GMT Received: by npiserve0.corp.us.uu.net id QQizoh25820 for stable@freebsd.org; Wed, 26 Jul 2000 17:50:35 -0400 (EDT) From: dkrapf@UU.NET (Donald E. Krapf) Message-Id: Subject: Re: one IP, multiple hosts. To: stable@freebsd.org Date: Wed, 26 Jul 2000 17:50:35 -0400 (EDT) In-Reply-To: from "noor@comrax.com" at Jul 26, 2000 11:30:38 PM X-Mailer: ELM [version 2.5 PL2] MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Sender: owner-freebsd-stable@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG You misunderstand *Virtual* hosts. Apache's NameVirtualHost allows you to host multiple websites on a single computer with a single IP address. This computer acts like multiple hosts (i.e. Virtual hosts), as far as web service goes, but is not really different hosts. It works by examining the HTTP/1.1 "HOST:" header to associate a request with a website. Since the multiple hosts are a figment of the webserver's imagination, the network monitoring tools don't know anything about them. If you happen to catch an HTTP request, you can read the "HOST:" header to see which virtual host it is destined for. noor@comrax.com writes: > Hi all, > > I'm wondering about a certain issue I would like to get help on. Suppose > you have one IP, 192.168.10.80, which is the IP of many hosted domains > (and their respective hosts) on a certain web server. > > Using Apache's NameVirtualHost and VirtualHost directives, I can direct > the flow of packets being sent to the same IP to different hosts. > > My question is: using tcpdump, trafshow, snort, or any other program I > don't know about, how can I know which host is being accessed when the > only information I got is: IP address, and port number (80 for web) ? > > Thanks for your help in advance. > > Noor Don -- Don Krapf dkrapf@uu.net To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-stable" in the body of the message