EFW Support

Support => EFW SMTP, HTTP, SIP, FTP Proxy Support => Topic started by: laythingy59 on Thursday 08 March 2012, 02:01:01 am



Title: Understanding the HTTP Report Under Logs > Proxy
Post by: laythingy59 on Thursday 08 March 2012, 02:01:01 am
Hi All

Over the last few days I have been asked to show users web access between specific dates.

Am I better off using the "HTTP Report" and then select daily or weekly report. Im not really sure what all the columns mean, maybe someone can enlightened me. The columns are

NUM   USERID           CONNECT   BYTES   %BYTES   IN-CACHE-OUT   ELAPSED TIME   MILISEC   %TIME
1        192.168.5.51  14.86K       1.01G    55.03%   0.54% 99.46%   03:27:08          2.42M       20.54%

When I Click on the IP address I get an in-depth view of what's been accessed. Is this correct??

ACCESSED SITE    CONNECT   BYTES      %BYTES   IN-CACHE-OUT      ELAPSED TIME   MILISEC   %TIME
lvideos.5min.com  2                415.61M  41.05%    0.00%  100.00%   00:03:28          208.74K    1.68%

I Get the first columns in the two tables (User ID and Accessed Site) but I haven't a clue what the others mean. can someone help please?
 
or

Would I be better just using the HTTP proxy log viewer and filtering on specific days

This log shows


Time                                 Source IP        Username    URL
2012/Mar/07 14:50:01     192.168.5.51  -                  http://cbk1.google.com/cbk?

This log is endless though, I presume this log shows every single hit, where as the other log shows websites that have been hit and totals the number of times hit. I'm not sure!!

Hope all that makes sense

Thanks

Adam