PDA

View Full Version : Log all websites


mreeves
04-21-2008, 09:11 AM
heya everyone! I was wondering how it could be possible to log every website a user tries to visit? I am being asked to keep a 2 month retention of every website everyone visits and I figured Untangle may be the best and easiest way to accomplish this.

Let me know your thoughts. Thanks!
--Mike

gotkimchi
04-21-2008, 09:13 AM
use the syslog feature and dump the log into a syslog server. You can use a free ones like kiwi.

mreeves
04-21-2008, 09:34 AM
Is doing it that way "user friendly" or, rather, easy to pull out what I need via a filter, print off, and have nontechnical people read?

mdh
04-21-2008, 07:02 PM
You can use Untangle Reports daily -- or weekly -- and look at WEB FILTER -> USER SUMMARY. Pick HTML mode, then be prepared to do some cutting and pasting. You will be able to look at each individual user and see all sites visited. Format the results, slap it into Excel, and analyze to your heart's content. If you decide to use weekly reports, make sure that you ONLY have weekly reports setup to run once a week. Untangle ships by default with a rolling seven-day period.

PLEASE BE WARNED that the number of visits to any given site may be extremely misleading. A browser left on msn or gmail or cnn or any portal that wants to fascinate you with ever-changing data is rolling up a hit each time, and there may be dozens of accessory sites listed with hits that the user never went to in the first place...the portal did, so it looks like the user did.

Make sure you make a list of the manager's IP all by itself. If he looks like he got caught with his hand in the cookie jar, he won't ask you for things like that anymore.

mreeves
04-22-2008, 09:18 AM
Ah, fair enough. But that shows the log for every website they visit? I figured that only showed a log for what I am saying "log" and since I don't have the option to "log" all, well, you get the idea.

I'm wondering if it wouldn't almost be better to just show the domain name. If they are going to "ebay.com" or "girlsgirlsgirls.com" or whatever, that's all the big man probably really wants, but beggars can't be choosers.

juank
04-22-2008, 09:59 AM
The Untangle Reports WILL show you what you need.

maxaudet
04-22-2008, 11:06 AM
I have another question about reports...

I have few caterogies on which we choose "Pass and log" and I would like to know to get reports for those logs... I dont see them in the daily/weekly logs...

What I want to know is what IPs went to those porn, etc, sites ...

mdh
04-22-2008, 11:24 AM
The daily/weekly are "reports" while that which shows in the event log is logs. You can extract the sites you want using the method that I described earlier, but in order to know if they went to the "special" sites, you would have to poke around the Web Filter event logs and do some highlighting on your report.

far182
09-28-2008, 12:56 PM
Just to confirm:

Going into Untangle Reports daily/weekly, choosing WEB FILTER,USER SUMMARY. Then picking HTML will show a list of ALL sites visited by the user? I had assumed it would only show sites that are in a category that we have set to "pass and log". Please clarify.

mdh
09-28-2008, 06:27 PM
Nope, you get the whole enchilada. Event log is where the pass/log would be the differentiator.