Community discussions

MikroTik App
 
hambakwe
newbie
Topic Author
Posts: 29
Joined: Mon Jan 02, 2006 12:58 pm
Location: UK, France, Russia
Contact:

Legal requirement for (W)ISPs to log urls browsed by clients

Fri Mar 24, 2006 4:36 pm

Recent changes in legislation in various European countries (mainly counter-terrorism, porn etc) mean that ISPs (including WISPs) must keep logs showing all urls visited by clients to whom they provide a service.

There are several logging possibilities in Mikrotik - but is there a simple way of generating a log which shows urls visited, the IP address handed out by DHCP, and the details of the account user who at that moment in time has been allocated the IP in question?

Then is it possible to store this log daily, or mail it to another location?
 
Freman
Frequent Visitor
Frequent Visitor
Posts: 76
Joined: Thu Jul 01, 2004 8:49 am

Fri Mar 31, 2006 7:13 am

Set up a remote syslog server in windows/linux, turn on /ip web-proxy and set it up as a transparent proxy.

then add your remote syslog server to system logging.

You will then have logs on a machine that can be parsed,a nd done with what ever you want...
13:59:40 web-proxy,debug,packet 1143777580.331 439 192.168.0.47
TCP_MISS/304 177 GET http://www.google.com/ac.js - DIRECT/66.102.7.104
text/html
13:59:40 web-proxy,debug,packet 1143777580.705 371 192.168.0.47
TCP_MISS/200 496 GET http://www.google.com/complete/search? -
DIRECT/66.102.7.104 text/html
13:59:57 web-proxy,debug,packet 1143777597.305 584 192.168.0.47
TCP_MISS/200 1739 GET http://www.google.com/imghp? - DIRECT/66.102.7.104
text/html
13:59:57 web-proxy,debug,packet 1143777597.857 549 192.168.0.47
TCP_MISS/200 9526 GET http://www.google.com/intl/en_ALL/images/images_hp.gi
f - DIRECT/66.102.7.104 image/gif
14:00:01 web-proxy,debug,packet 1143777601.521 419 192.168.0.47
TCP_MISS/200 1755 GET http://www.google.com/webhp? - DIRECT/66.102.7.104
text/html
14:00:02 web-proxy,debug,packet 1143777602.194 670 192.168.0.47
TCP_MISS/200 496 GET http://www.google.com/complete/search? -
DIRECT/66.102.7.104 text/html
 
p0rkch0p
just joined
Posts: 13
Joined: Mon Mar 14, 2005 5:01 am

how do i activate webproxy logging

Fri Apr 21, 2006 1:09 am

im kinda new all i get from the logs are firewall info. how do i activate logging of webproxy urls

my web-proxy is up and transparent proxy is up.

appreciate any help
 
csickles
Forum Guru
Forum Guru
Posts: 1257
Joined: Fri May 28, 2004 8:46 pm
Location: Phoenix, AZ
Contact:

Fri Apr 21, 2006 1:30 am

You will now need to log the actions of DHCP to atleast loosly marry up the IP to the client.. (I think you will need some sort of Radius solution).

Or possably the new UserManager will log IPs handed out to users...

Craig
Things that make you go "Hmmmmmmmm"...

Craig
 
hambakwe
newbie
Topic Author
Posts: 29
Joined: Mon Jan 02, 2006 12:58 pm
Location: UK, France, Russia
Contact:

Re: Legal requirement for (W)ISPs to log urls browsed by clients

Tue Oct 09, 2007 6:56 pm

An interesting follow on here - earlier this week we had a '06.00 knock' from the french police. Apparently someone had accessed a peadophile website using our free (but account based) hotspot in mid January. It had been traced back to us via our fixed IP by a specialist police unit based in Paris - but took 9 months to get through the system.

Luckily we had enough information to pass on to them.... but what a really useful feature to add into MT User Manager.

99.9% of the time the data would just be archived, but if the knock comes you are prepared.

Who is online

Users browsing this forum: misha, RegyJenkins and 52 guests