Logging URLs accessed through the router

PiKe · 13 Sep 2016 at 17:30

I have been tasked with finding a piece of software that can log URLs visited by which IPs on the network, I found that Untangle is pretty much ideal, but I don't like the subscription based nature of the modules, I would rather have something that could be purchased once and that's it.

Proxying isn't an option, as https traffic would avoid the proxy or I would have to install a CA on each workstation, this would also mean phones wouldn't be able to get to certain sites.

Any ideas?

PiKe · 15 Sep 2016 at 09:38

I can't find a syslog server that offers sufficient filtering, there's going to be thousands of entries to sort through.

PiKe · 15 Sep 2016 at 13:45

That doesn't show any https traffic.

PiKe · 15 Sep 2016 at 20:36

ov_sjo said:
You can't log HTTPS unless you go via proxy which handles the SSL termination.

You can, I'm only interested in the http connect header, I don't need granular.

That's how Untangle does it without man in the middle.

PiKe · 15 Sep 2016 at 21:25

meandu229 said:
From what understand you would still just get the domain name from that header and not a full URL.

For the purpose of knowing who is accessing Facebook, that would be fine.