[WBEL-users] Squid Online monitoring

[Karanbir Singh]

Any program that looks at the log file will not give you what you want.

here is why : If you look at the squid code and how it works, you will
see that the log file entry is written out 'after' the transfer is over
( well, the cache ID is inserted, that wont be there till the file is
completely in cache : translating into the fact that the transfer is over )

So if someone is hammering your link, leeching the whitebox Linux .iso
files, you will see the lights blinking on the router, but nothing in
the log files - till the transfer is over ( 1.7 gigs later ).

You can do some kludges with the netstat command to see where / which
machines Squid is taking to on each side of the interface. Not sure how
you will link up the two ( eg. who on the internal net is talking to who
on the external net ) Apart from that, I have not seen an app that will
meet your spec. If you find something, do let me know.

Squid does have a very comprehensive plugin development interface -
maybe if you are upto it you might want to have a go at creating
something of this nature ? a good place to start would be to look at the
http://www.squid-cache.org/Doc/Prog-Guide/

I know this doesent help, but I thought i would comment anyway since
almost everyone here seems to be talking about the log's.....

Do let me know how you get along with this.

- K

Jesús García González wrote:

> Hello again,
> 
> You see, I'm using both webalizer and sarg. They work great. But they do not
> show an immediate (online) status of what is going on "NOW". Suppose, I look
> at the MRTG and the internet channel is fully being used, I'd like to know
> if the means exist to determine who is drowning my channel and what her/his
> purpose is (downloading important stuff or just porno clips)
> 
> Marcusv:
> So far the best thing I've found for this purpose is Squidview
> (http://www.rillion.net/squidview/) it certainly beats the tail command, but
> though I just installed it and have certainly NOT had time to explore its
> full potentials I'm not quite convinced it does all that I need...
> 
> Thanks to all for your time,
> Help continues to be appreciated,
> J.
> 
> 
>  
> =================================================================================
> *Aviso Legal: 
> 
> Esta información es propiedad exclusiva del Centro de Investigaciones del Petróleo (Ceinpet) perteneciente a la Unión Cubapetróleo (Cupet). La distribución o copia de este mensaje está estrictamente prohibida para personas no autorizadas. Si usted recibe este mensaje por equivocación, por favor bórrelo y envíe un mensaje a seguridad@ceinpet.cupet.cu 
> 
> *Legal Warning: 
> 
> This information is exclusive property of the Petroleum Research Center (Ceinpet) which belongs to Cubapetróleo Union (Cupet). The distribution or copy of this message to non authorized personnel is strictly forbidden. If by any mistake you receive this message, please delete it and send a message to seguridad@ceinpet.cupet.cu
> 
> _______________________________________________
> Whitebox-users mailing list
> Whitebox-users@beau.org
> http://beau.org/mailman/listinfo/whitebox-users
> 

-- 
Karanbir Singh

http://www.karan.org/
ICQ : 2522219 - Yahoo IM : z00dax
GnuPG Public Key : http://www.karan.org/publickey.asc