>From: "Brian Janice" <[EMAIL PROTECTED]>
>Subject: [Masq] Logging a MASQ box
>Is there any kind of logging I can use to see who is using my
MASQ box and
>where they're going?
I use an hourly cron job.
#!/bin/bash
# batch to send port list
cd /var/log
/sbin/ipfwadm -Mln >/var/log/portstemp
sort -o portsort +3 portstemp
date >>ports
cat portstemp >>ports
The ports file is mailed to me and deleted as part of the nightly log
gleaning.
You end up with something like
> Tue May 11 04:01:55 EDT 1999
> Tue May 11 05:01:00 EDT 1999
> IP masquerading entries
> Tue May 11 06:01:00 EDT 1999
> IP masquerading entries
> prot expire source destination ports
> tcp 71:29.45 172.16.18.137 205.133.149.2 2083 (63075)
> -> 110
> tcp 68:30.06 172.16.18.137 205.133.149.2 2080 (63072)
> -> 110
> Tue May 11 07:01:00 EDT 1999
> IP masquerading entries
> prot expire source destination ports
> tcp 11:29.80 172.16.18.137 205.133.149.2 2083 (63075)
> -> 110
> tcp 08:30.41 172.16.18.137 205.133.149.2 2080 (63072)
> -> 110
>
There's probably a better way, but this is good enough for my uses.
--
Dale Hofstetter
Princeton City Schools
[EMAIL PROTECTED]
_______________________________________________
Masq maillist - [EMAIL PROTECTED]
http://tiffany.indyramp.com/mailman/listinfo/masq
Admin requests can be handled by web (above) or [EMAIL PROTECTED]
