Because the Internet operates on IP addresses, not on URLs.
If you want the logs to show URLs, they'd have to be able to do domain
name resolution for each and every instance of an IP address recorded,
which would eat up nearly all your bandwidth--and diskspace--in very
little time. And, that's not going to happen.
What I did when I administered Gauntlet firewalls (and other kinds) is to
write a shell script to parse the Gauntlet FW logs and resolve the IP
addresses and then generate a tab-delimited ascii report for me each day.
It took less than 30 minutes to write the script and test it and put it on
a cronjob to transfer the nightly log to the archive machine, parse it and
mail the report(s) each morning. You can do the same thing. Or buy one of
the commercial off-the-shelf tools to do the same thing.
Regards.
Bill
=============================================================================
All opinions expressed in the foregoing message are mine, not my employer's.
-----------------------------------------------------------------------------
Bill Casti, CQA Email: [EMAIL PROTECTED]
Sr. Systems Admin/UNIX Admin & Security Pager: +1 800 604 6149
Network Operations Work: +1 202 392 8748
Bell Atlantic Federal Systems Fax: +1 703 834 8209
Washington DC Cell: +1 703 244-0497
=============================================================================
On Sun, 29 Aug 1999, Richard Rettich wrote:
> Could someone please explain to me why the logs that are Emailed to me(Daily
> and Weekly) do not have the URL information that is shown in the "Monitor
> Log"? The Daily Log I get only shows IP addresses which makes it almost
> useless for reporting on inappropriate network usage.
>
> Best regards,
> Richard
>
> [EMAIL PROTECTED]
>
>
> -
> [To unsubscribe, send mail to [EMAIL PROTECTED] with
> "unsubscribe firewalls" in the body of the message.]
>
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]
