So, just set up Squid on a Debian box for an office with ~30 or so workstations. Active Directory authentication using Kerberos & NTLM, with basic auth backup for a couple old workstations not using domain accounts. I've used this before for filtering and bandwidth monitoring.
Working wonderfully - linked to groups in AD for different levels of access, from "blocked" to "anonymous" (ie. not logged at all).
However, the main reason they want this in place is just to check on people surfing too much. They don't want to block anybody, but they also don't want to be taken advantage of either.
So... I need a way to analyze the Squid logs to pull out actual page visits. Using Lightsquid right now, and it's tough to explain to them why the site with the highest % of "Em-Bees" (megabytes) isn't necessarily the most visited site.
I would really like a way to see each page request. Ie. somebody types in Facebook.com, that's one entry. Don't show the other 15-100 connections that happen when you load it up - they want to know how many times somebody visited a site.
Any ideas?
Working wonderfully - linked to groups in AD for different levels of access, from "blocked" to "anonymous" (ie. not logged at all).
However, the main reason they want this in place is just to check on people surfing too much. They don't want to block anybody, but they also don't want to be taken advantage of either.
So... I need a way to analyze the Squid logs to pull out actual page visits. Using Lightsquid right now, and it's tough to explain to them why the site with the highest % of "Em-Bees" (megabytes) isn't necessarily the most visited site.
I would really like a way to see each page request. Ie. somebody types in Facebook.com, that's one entry. Don't show the other 15-100 connections that happen when you load it up - they want to know how many times somebody visited a site.
Any ideas?