ntop maintains a log of it's OWN web traffic. But what you would need to do is to monitor the requests and responses. The trick would be matching them up.
For a one-off, I might use tcpdump and awk/perl. I don't think that's something we would put into ntop, and it's more an ntop-dev discussion anyway... -----Burton -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Steen Suder Sent: Tuesday, February 21, 2006 2:51 AM To: [email protected] Subject: [Ntop] "Ghost" webserver access log with Ntop? I'd like to build a system that can "create" a standard webserver access log for a given webserver (that sits in our datacenter) by just capturing and decoding traffic passively through a network TAP. This log can be fed to Webalizer, Webtrends or whatever loganalyzer we see fit for a particular purpose... or be put into a database for an extended workout In short: I want to obtain an access log for a webserver without getting it directly from the webserver itself. I remember being told that somewhere in the belly of Ntop this functionality exists in some form. I have not been able to find the functionality so far, though. How does Ntop fit into the picture? What parts of my idea can Ntop do? -- Best regards, Steen Suder _______________________________________________ Ntop mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop
