Security Basics mailing list archives
Re: Web logging
From: Ted Percival <ted () mrphp com au>
Date: Tue, 16 Nov 2004 12:25:29 +1000
There's no guaranteed way to find out, but there are a few clues available. If the server is running squid, it usually inserts a "Via" and an "X-Forwarded-For" header in the request. However just because the server is running a squid proxy _does not_ mean you are being monitored - many sysadmins use squid proxy just to reduce the load and redundant data on the precious Internet link and don't use its logging features, and if they do - that might just be to determine how effective the cache is.
As mentioned by other respondents to this thread, there are many other applications which can log network use, none of which I've used - so I can't tell you how to determine if they're being used.
The best way to find out is just to ask your sysadmin. They should give you an honest answer ;)
To look for the presence of a Squid cache between you and the WWW, go to http://web.midg3t.net/test/headers.php - that will show you all the request headers your UA sends. The source is available at http://web.midg3t.net/test/headers.phps and is not at all fancy. Please take it easy on that link as it has only a small upstream capacity.
Ted Percival steven faiola wrote:
Is there anyway to find out if I'm being monitored at work?
Current thread:
- Re: Web logging, (continued)
- Re: Web logging Ted Percival (Nov 15)
- Re: Web logging K. K. Mookhey (Nov 16)
- Re: Web logging Web Manager (Nov 15)
- Web logging Stephane Auger (Nov 15)
- Re: Web logging Michael C. McDonnell (Nov 15)
- RE: Web logging Omar Salvador Alcalá Ruiz (Nov 15)
- RE: Web logging ttate (Nov 15)
- RE: Web logging Dante Mercurio (Nov 15)
- RE: Web logging Stephane Auger (Nov 15)
- Re: Web logging Michael C. McDonnell (Nov 15)
- Re: Web logging Ted Percival (Nov 16)
- Re: Web logging Julen C (Nov 16)
- Re: Web logging Temple Tiger (Nov 17)
- RE: Web logging Stephane Auger (Nov 18)
- Re: Web logging Ted Percival (Nov 15)