topic CLI Single user traffic monitoring S360 in Web Security

CLI Single user traffic monitoring S360

chiefbootknocker — Sun, 08 Jan 2012 10:45:38 GMT

Anybody know how to do this? I would like to be able to tail in real time a single users web traffic. I was able to tail the accesslogs, but it does not seem to update as new entries come in.

Thank you

CLI Single user traffic monitoring S360

Chris Illsley — Mon, 09 Jan 2012 07:41:22 GMT

Hi Bob,

It should work as you said:

grep

username

y, n, y, n

Certainly does for me.

Thanks

Chris

Re: CLI Single user traffic monitoring S360

chiefbootknocker — Mon, 09 Jan 2012 11:29:54 GMT

Yeah I feel a bit stupid for asking as you answer is basically what I saw in a video link from within the support pages, but when I do that nothing happens. Maybe I just need to let it sit there for a moment longer. If I choose "N" to tail the accesslogs then shortly after I hit enter all of the archived logs start to scroll through. I'll have to try it again

Thank you for responding.

CLI Single user traffic monitoring S360

Chris Illsley — Mon, 09 Jan 2012 11:55:51 GMT

Could it be an unauthenticated site you are regexing? You could test using a different part of the log, the URL "google" for example.

Cheers

CLI Single user traffic monitoring S360

Ken Stieers — Tue, 10 Jan 2012 16:21:21 GMT

Bob,

If you're looking for a single user, you want to grep the user's IP.

Keep in mind that you're tailing a log file, and that the box will keep a certain amount of that in memory before it flushes it to disk... I tend to see a bit of lag on my S160...

Ken