Re: [Picviz] Squid php proxy detection

2009-05-19 Thread Sebastien Tricaud
On Tue, May 19, 2009 at 10:28 AM, Ionel GARDAIS wrote: > Hi, Hello Ionel, > > I found a way to know which of my users are bypassing webfiltering rules by > using PHPProxy. > Basically, I wrote a python script that parses squid logs and list how many > different mime-types are associated with a

[Picviz] Squid php proxy detection

2009-05-19 Thread Ionel GARDAIS
Hi, I found a way to know which of my users are bypassing webfiltering rules by using PHPProxy. Basically, I wrote a python script that parses squid logs and list how many different mime-types are associated with a unique URL. A threshold of 4 or 5 different mimes per URL is suspicious (however,