That's a good point. In the real-life version of the story this user is on Road Runner broadband and I don't think they're using proxies. If they are, that might be a good place to start but it would probably be difficult to get that information from them.
Thanks, John >>> "mike greenberg" 9/19/02 11:29:40 AM >>> The answer is yes.... Your company may be running transparent proxying so that everything that you do and places that you visit will be "cache" at the proxy server. Where I work, we use "squid" to cache Internet traffic and maintain a log of what and where "internal" users visit... Internal users can NOT tell because it is "transparent" John Neiberger wrote:I now, that's a bizarre subject line. I couldn't think of a better one this early in the morning. :-) Here are the details... Let's say I went to a website and downloaded a specific file, then I subsequently cleared my cache. Once that is done, is there any way to reasonably prove where I got that file? If I'm claiming to have gotten that file from a particular site at a particular time, is there some other record on the computer that might still be intact that would show where and when I got it? Assume this is IE on Windows XP. Thanks, John Do you Yahoo!? New DSL Internet Access from SBC & Yahoo! Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=53648&t=53620 -------------------------------------------------- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

