Correct. That gives you the server and client, but not the
URL. However, the original message did not indicate whether
that was the intent. If you want the URLs, then the only real
choice is to use a proxy that logs such things.
On Thu, Jan 06, 2000 at 10:52:01PM +0800, Chris Dowling wrote:
> correct me if I'm wrong, but that will only tell you the address of the
> server that pages are being requested from, and which machine requested
> them? it won't tell you what was page was actually requested by that
> person...
>
> as for Orwellian: if you're prepared to be slightly annoying to people,
> then you might as well go the whole hog and drive them nuts :)
>
> hey, that might not make a bad .sig...
>
> sugarboy
>
> "J. Scott Kasten" wrote:
> >
> > At the risk of adding to your employee's Orwellian future, what you
> > want to do is just log TCP SYNs going out to port 80. I beleive the
> > -y option in chains specifies SYN only. Man it to be sure.
> >
--
J. Scott Kasten
jsk AT tetracon-eng DOT net
"That wasn't an attack. It was preemptive retaliation!"
--
To unsubscribe: mail [EMAIL PROTECTED] with "unsubscribe"
as the Subject.
