Discussion :

[nizar_insat]

Salut
j'utilisais un outil appelé SARG (squid analysor reporting generator) qui permet l'analyse du fichier log de squid et la génération d'un rapport détaillé de l'usage d'internet pour chaque adresse IP.
Mon problème est que le fichier log de squid associe tous le trafic internet à une adresse IP unique 192.170.1.254 qui est en faite l'adresse de mon réseau local tandis que moi je veu que ça soit pour chaque utilsateur de mon reseau . Je dirais qu’il s’agit d’une astuce dans le fichier de configuration de squid. J’aurais besoin de votre aide si vous le permettez.
Merci d’avance

[gorgonite]

donnes nous une ligne de access.log

[nizar_insat]

195 text/javascript
1193823982.351 321 121.34.64.53 TCP_MISS/302 555 GET http://acnetwork.flux.acsyndication.com/? - DIRECT/195.70.16.195 text/html
1193823982.391 465 59.56.108.95 TCP_MISS/200 955 GET http://network.realmedia.com/RealMed...tgms/ss/a@Top1 - DIRECT/64.191.218.23 text/html
1193823982.430 4768 222.141.201.109 TCP_HIT/200 17343 GET http://pagead2.googlesyndication.com/pagead/show_ads.js - NONE/- text/javascript
1193823982.432 25549 222.233.52.152 TCP_MISS/000 0 CONNECT 202.251.0.2:25 - NONE/- -
1193823982.628 28802 222.233.52.152 TCP_MISS/000 0 CONNECT 138.243.60.11:25 - NONE/- -
1193823982.688 2473 59.56.109.159 TCP_MISS/200 8518 GET http://a.tribalfusion.com/tags/Bustcom/ROS/tags.js - DIRECT/204.11.109.24 application/x-javascript
1193823982.781 727 59.56.109.245 TCP_MISS/200 1207 GET http://network.realmedia.com/RealMed...34ent/ss/a@x10 - DIRECT/64.191.218.23 text/html
1193823982.910 7299 87.98.222.27 TCP_MISS/200 45175 GET http://www.pap.fr/immobilier/? - DIRECT/84.14.8.28 text/html
1193823983.000 59181 194.135.30.143 TCP_MISS/503 0 CONNECT fd.nic.ru:443 - DIRECT/194.85.61.46 -
1193823983.010 2028 123.8.227.27 TCP_MISS/302 1585 GET http://www.burstnet.com/cgi-bin/ads/...1S/sz=728x90A/ - DIRECT/209.222.141.182 text/plain
1193823983.042 3052 77.70.106.4 TCP_MISS/200 7261 POST http://www.plain-text.info/search - DIRECT/62.75.222.218 text/html
1193823983.147 2359 91.105.171.249 TCP_MISS/200 455 GET http://209.73.168.36/config/isp_verify_user? - DIRECT/209.73.168.36 text/html
1193823983.525 4744 24.12.250.245 TCP_MISS/999 4968 GET http://edit.in.yahoo.com/config/login? - DIRECT/203.84.221.233 text/html
1193823983.563 1319 59.56.109.159 TCP_HIT/200 12222 GET http://img.directtrack.com/marketleverage/16202.gif - NONE/- image/gif
1193823983.829 0 218.21.37.94 TCP_MEM_HIT/200 6907 GET http://adserve.adtoll.com/js/at_ag_1323.js - NONE/- application/x-javascript
1193823983.888 5276 210.50.10.8 TCP_MISS/999 4966 GET http://login.bjs.yahoo.com/config/login? - DIRECT/202.43.216.165 text/html
1193823984.125 1242 218.21.37.94 TCP_MISS/200 2240 GET http://acnetwork.flux.acsyndication.com/AdServer/? - DIRECT/195.70.16.195 text/javascript
1193823984.153 908 222.89.224.162 TCP_HIT/200 10126 GET http://cb.us.miva.com/WebFiles/display_adunit_3.3.js - NONE/- application/x-javascript
1193823984.271 1905 91.1.198.50 TCP_MISS/999 4968 GET http://217.146.187.128/config/login? - DIRECT/217.146.187.128 text/html
1193823984.295 2215 209.33.85.157 TCP_MISS/999 2888 GET http://202.43.196.71/config/isp_verify_user? - DIRECT/202.43.196.71 text/html
1193823984.407 1072 123.8.227.27 TCP_MISS/302 1496 GET http://as.casalemedia.com/sd? - DIRECT/78.33.7.17 text/html
1193823984.617 1250 218.21.37.94 TCP_HIT/200 8126 GET http://img.directtrack.com/cash4creatives/45980.gif - NONE/- image/gif
1193823984.655 984 121.34.64.53 TCP_MISS/200 2240 GET http://acnetwork.flux.acsyndication.com/AdServer/? - DIRECT/195.70.16.195 text/javascript
1193823984.694 3592 62.102.100.109 TCP_MISS/301 388 GET http://network.adsleader.com/banner/668/54555%26dp=0 - DIRECT/207.67.0.108 image/gif
1193823984.851 1068 59.56.108.95 TCP_MISS/200 2767 GET http://64.191.218.21/RealMedia/ads/a...574763@Bottom? - DIRECT/64.191.218.21 application/x-javascript
1193823984.851 1065 91.105.171.249 TCP_MISS/200 455 GET http://209.73.168.36/config/isp_verify_user? - DIRECT/209.73.168.36 text/html
1193823985.169 2326 192.170.1.20 TCP_MISS/200 6184 GET http://rapidshare.com/files/38119686...CD2.part04.rar - DIRECT/195.122.131.3 text/html
1193823985.193 22054 218.56.57.91 TCP_MISS/200 225 CONNECT tcpconn2.tencent.com:443 - DIRECT/219.133.60.148 -
1193823985.290 2507 74.133.16.85 TCP_MISS/999 4978 GET http://66.196.125.152/client/clogin? - DIRECT/66.196.125.152 text/html
1193823985.443 6 59.56.109.245 TCP_MEM_HIT/200 536 GET http://66.179.234.173/images/default...ct_90_728.html - NONE/- text/html
1193823985.495 3324 124.72.31.179 TCP_MISS/200 8525 GET http://tags.expo9.exponential.com/ta...as/ROS/tags.js - DIRECT/204.11.109.22 application/x-javascript
1193823985.529 2856 70.185.186.5 TCP_MISS/999 4968 GET http://l42.login.scd.yahoo.com/config/login? - DIRECT/66.94.230.28 text/html
1193823985.572 6146 59.56.109.245 TCP_MISS/200 2585 GET http://acnetwork.flux.acsyndication.com/AdServer/? - DIRECT/195.70.16.195 text/javascript
1193823985.593 3556 85.176.156.126 TCP_MISS/200 10422 GET http://automarkt.autobild.de/autobil...ht/detail.php? - DIRECT/213.20.85.51 text/html
1193823985.679 21262 59.56.109.159 TCP_MISS/200 36212 GET http://www.brandarama.com/GKep461dd8677? - DIRECT/72.37.165.226 text/html
1193823985.682 261756 59.56.109.159 TCP_MISS/200 33911 GET http://www.brandarama.com/lib/global_js_functions.js? - DIRECT/72.37.165.226 text/javascript
1193823985.686 4641 58.59.230.76 TCP_MISS/302 1416 GET http://puritanism.cn/search/redirect.php? - DIRECT/82.98.86.175 text/html

[gorgonite]

j'ai oublié de repasser sur ce post... à mon avis, ça vient de ton analyseur de logs


je pense qu'il faudrait tester avec un autre outil

j'ai l'habitude de celui-ci : http://www.developpez.net/forums/sho...88&postcount=7

[nizar_insat]

merci pour ton conseil