Re: Logging the source port?
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Logging the source port?



common log format doesn't capture that information...

http://onlamp.com/pub/a/apache/2004/04/22/blackbox_logs.html?page=3

that said, of the A-P or PAT box which isn't under your control in all
likelyhood anyway doesn't log the association of internal devices to
external ports then knowing the source port may not tell you that much
about which client you're talking to...

joel

Stephane Bortzmeyer wrote:
> At the Transport Area meeting, Alain Durand, presenting
> draft-ford-shared-addressing-issues mentioned that we may well have
> now to always log the source port of a TCP request, not only the
> source IP address (which may well be shared), if we want traceability.
> 
> Does anyone know if it is possible with the typical TCP servers? For
> instance, I find no way to do it with Apache
> <http://httpd.apache.org/docs/2.2/mod/mod_log_config.html>.
> _______________________________________________
> Ietf mailing list
> Ietf at ietf.org
> https://www.ietf.org/mailman/listinfo/ietf
> 

Note Well: Messages sent to this mailing list are the opinions of the senders and do not imply endorsement by the IETF.

Note: Messages sent to this list are the opinions of the senders and do not imply endorsement by the IETF.