Cullen Programming

JAVA Internet Proxy Server


Proxy Server Logging and Surveillance Guide


Logging File Pathname shows the designation for the output of logging data produced by the product. If no log file is listed in the configuration file then the product will place all generated log files in a directory called "log" that is a subdirectory off of the one in with the configuration file resides. If the directory that is defaulted to or selected does not exist then an attempt will be made to create it by the product.

Log files that are invalidly named in the configuration file will be flagged at startup time and cause the application to terminate.

This panel will present a scrollable log of the last 1000(min)-2000(max) lines of traced activity taking place through the proxy server. When the maximum number of lines are reached in the logging panel, the least recent are flushed to prevent saturation of virtual memory.

The radio buttons of Panel and Console are selectable to have PServer write logging records to the viewed panel and a separate date stamped log file kept on your hard drive, and also the command console (the black screen).

The radio buttons of AutoScroll are selectable to have PServer present its logging in an automatically scrolling format. It will constantly adjust itself towards the bottom of the scroll pane window.

You can also set the TRACE level. The base (default) level show startup and shutdown activity and each site that is visited. Each progressive level will include the base trace information.

(DEFAULT) Shows startup/shutdown information, HTTP addresses visited, requests to pick up and send email, FTP addresses vistited, Telnet addresses and SOCKS session addresses.

Trace1 -- Shows TCP/IP socket I/O activity and task dispatching and termination.

Trace2 -- Shows intermediate data being requested over the Internet.

Trace3 -- Shows detail protocol data and traffic.

Msgtxt -- Shows detail email text, passwords and instant messenger content. This is an intensive trace that will show all destination and origin information as well as the text of the messages. Caution: this may cause short on memory condition if used excessively.

The "List Prohibited" button is used to list in the logging each website that has been chosen by you to have its access denied to your users. The list will be sorted by name.
Note that each attempt to access a prohibited website is logged.

The "Clear" button is used to clear the view panel of all accumulated logging and recover its storage. The records written to the disk logging file remain intact. Once cleared, the records are not available for review until the next day.
Scroll bars are provided for forward/backward left/right viewing.
Each line with showing a Client request or a Server response will show both the IP address and the network name.

 
 
Log Record Format:
 
field1         field2      field3         field4      field5       field6             
Time_of_Day    protocol    task number    CLIENT      Request      text
                                          SERVER      Response     text
 

field4 will show both the IP address and name (IP address, Name) of the communicating partners. When this field posts CLIENT then the data is information being requested by the client. When this field posts SERVER then the data is the response that is returned from the server on the Internet.

Data Selection from Log Files

Data is selectable from the Logging Area. Just drag the cursor with the left mouse button depressed across the logging text area to mark out your data selection. Use the EDIT pulldown and choose COPY to place the data selection to the "system clipboard". You can then transfer the data into any application that accepts a PASTE operation, such as a Word document, text editor, etc.

Surveillance of Logged Websites

Also on Windows machines you can view the websites whose address appears in the log records. Just move your mouse to the line that contains the website address, and Click. Then go up to the "View" pulldown and select either "HOME" for the website homepage or "PAGE" for this specific addressed page on that website. Your Internet Explorer or Netscape browser window will open on your desktop (if one is not already opened) and the website will be loaded into a browser. (This function is not yet available on Linux)

Archiving of Log Files

Each day at midnight the current log file is closed and archived to your hard disk. A new file is immediately created and opened to continue capture of log records. The file names of the log files will be of the form:

 
 
    YYYYMMDD.plog       ,where YYYY is the year
                               MM   is the numeric month
                               DD   is the numeric day of the month
 

Reviewing of Past Archived Log Files

Up to 365 days of archived logfiles can be retrieved and viewed from the "Review" panel. Simply push the "Review" button and another window will open displaying yesterday's log file. The combination box at the top of the panel will allow you to select any of up to 100 old log files for viewing. Choose a dated file from the selections and click your mouse. That file will be displayed in the text area of the panel.

As with the current Log, you can also select websites for browsing here. Just mouse click the line with the website address and select the browse option from the "View" pulldown.

Please note that the current day's log is not available for viewing under "Review" since it is still open for output on PServer.


Filtering Archived Log Files

You can selectively filter the records of the viewed log file. Place the string of characters that you desire in the "filtering command" box. Then click the "Run Filter" button.
All records that have a string of characters that match your filter argument will be displayed in the viewing panel. You can then further "drill down" through these records with another filtering command, etc.


Email Capture and Copying

You can choose specific users in which you wish to capture their incoming and outgoing email messages. You pick the users whose email you want to see, and specify the email address in which to forward the captured email. See the "Access Control Guide" pages.


[Return to User Guide Table of Contents]

[Return to Index]

[Return to Cullen Programming Home Page]