Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 6 replies
  • Subscribers 1 subscriber
  • Views 1420 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

strange proxy log informatiom

stevecim_01
Hi All

anyone running 7.101 with transparent proxy and web content filtering
This weeks report showed +58GB of http traffic, looking at the log files I found a few entries like this.

 
2008:02:15-15:01:17 (none) httpproxy[26784]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="10.123.20.104" user="" statuscode="200" cached="0" profile="profile_0" filteraction="action_REF_DefaultHTTPCFFAction" size="24759538899" time="123994 ms" request="0xb182d0f0" url="68.142.200.12/.../securedownload

notice the size  24.7GB that's a large file to down load via yahoo mail. there were a few entries like this all for yahoo mail ranging from a few GB to 24GB

I'm waiting on traffic reports from my ISP but I'll be very supprised if they show 58GB.

Cheers, Stephen


This thread was automatically locked due to age.
Parents Reply Children
  • 0 in reply to deepred
    I have 2 internet feeds here, 1 serving 200 users, running squid and 1 serving 3000 users running astaro 7.101, these log entries only apear in the Astaro log, I've checked 30GB of squid logs, not 1 entry. [:)]
  • 0 in reply to stevecim_01
    Can Astaro Gurus answer this post. I have seen this in many of our clients where Astaro web security logs show secure download from yahoo mail or gmail. The file sizes are in GB. Is that anyone using sites like Pando.com or Yousendit.com to upload large files to thier emails and then download it.
    How to block or limit file downloading?
    How to intercept secure connection?
    How to trace what file is being downloaded?
    Can admin get notification on such download?
    How it is possible to download such large files and Astaro webadmin doesn't know whats happening in the network?

    Please Astaro Tech Support answer this post