Security Basics mailing list archives

Re: Web logging


From: Ted Percival <ted () mrphp com au>
Date: Tue, 16 Nov 2004 12:25:29 +1000

There's no guaranteed way to find out, but there are a few clues available. If the server is running squid, it usually inserts a "Via" and an "X-Forwarded-For" header in the request. However just because the server is running a squid proxy _does not_ mean you are being monitored - many sysadmins use squid proxy just to reduce the load and redundant data on the precious Internet link and don't use its logging features, and if they do - that might just be to determine how effective the cache is.

As mentioned by other respondents to this thread, there are many other applications which can log network use, none of which I've used - so I can't tell you how to determine if they're being used.

The best way to find out is just to ask your sysadmin. They should give you an honest answer ;)

To look for the presence of a Squid cache between you and the WWW, go to http://web.midg3t.net/test/headers.php - that will show you all the request headers your UA sends. The source is available at http://web.midg3t.net/test/headers.phps and is not at all fancy. Please take it easy on that link as it has only a small upstream capacity.

Ted Percival

steven faiola wrote:
Is there anyway to find out if I'm being monitored at work?


Current thread: