General Questions

[** THE CONTEXT **]

Hello,

** THE CONTEXT **

LAN(clients-10.0.0.0/28)-----m0n0wall-----WAN

We use m0n0Wall 1.233 on a WRAP (m0n0 is on a CF card)

LAN-clients: Windows XP


** WHAT WE NEED **

For company concerns, we need to keep track of all web traffic.
Which means: log users web traffic for sites their visiting thru m0n0wall.
We need an URL list to be generated.

We would like m0n0 to do the job:
m0n0 keeps track of all the web traffic and then every 12h sends the log file to an email address, ftp server...
We would like to avoid the use of another proxy server (running squid).

On a mailing list thread "Outback Dingo" partially answered my question. He/She suggested me the use dsniff (http://www.monkey.org/~dugsong/dsniff/)

Does anyone have some experience with dnsniff?
Does have dsniff have an impact on m0n0wall reliability?

If someone already uses dsniff with m0n0, what is the exact installation/config procedure?

Perhaps someone has another solution?

Thank you very much for your help,
Thomas

We would like to avoid the use of another proxy server (running squid).

Where's the first proxy server?  Monowall is an IP firewall/router  Have a look at pfsense[url] This is based on Monowall but with different aims.  It supports installing packages and there is some documentation that refers to installing squid.

There is no first proxy server.

LAN-------m0n0wall--------WAN

What I'm looking for is a way to use m0n0wall to logg the web activity (from LAN to WAN)

As mentionned in my message I use WRAP board.
Which means I can't use pfsense+squid.
Packages are not available for pfsense embedded.