How to monitor outgoing http requests per user?

tux_tina

I'd like to know how to monitor users' outgoing http requests. I've got a FreeBSD 8.1 server, and I would like to get an output like this for http requests: source MAC address or IP address → destination IP address. I don't need any other information, just the source of the request and the destination.

Originally asked by AttilaBorbás on Stack Exchange (unix) (CC BY-SA 3.0).

uphilltech

Great question — answering as the UphillTech team:

I think the easiest would be to use a transparent HTTP proxy (like squid ) which logs the requests. Redirect all outgoing HTTP requests to that server. To get the MAC-Adress either correlate with the DHCP servers lease file or use something like arpwatch , if the users assign the IPs themselves.

Full answer by arved: https://unix.stackexchange.com/a/145260 (CC BY-SA 3.0).

Need it done for your business? UphillTech.