Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I'm assuming that squid keeps a list of internal ip:port that a request is made on and the matching external ip:port that the request is fulfilled with.

In the case of a long transfer, such as a file download, it would be nice to be able to see which internal ip:port is downloading the file.

I am able to see the traffic and get the external ip:port that squid is using easily with tcpdump or iptraf but I can't find a way to map this back to an internal ip:port.

share|improve this question
add comment

1 Answer

Squid's access.log should show you the requesting IP address. I use SARG to parse access.log into something more readable. In the case that you want to know the requesting IP that goes with a specific file

grep *filename* access.log

...should tell you the requestor's/requestors' IP.

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.