<HTML><BODY><div>Hello Amos!<br>Glad to get your answer!<br><br><br></div><div>1. I have tried to use %>p specifier for adaptation_meta directive. But it seems does not work that way I used it.</div><div>I specified it in squid.conf:<br><br></div><div>adaptation_meta X-CLIENT-SRCPORT %>p<br><br></div>I found that specifier ony in logformat. May be you mixed it up?<br><br>2. About mapping port transparently. How does it help to get (at least) mapped port number in ICAP?<br><br>3. I would like to track any software. Especially software which use "User Agent" field not <span id="result_box" class="short_text" lang="en"><span class="hps alt-edited">legitimately or event does not fill it at all.</span></span><br><br><br>--<br>/BR, Alexander<br><br>Mon, 15 Dec 2014 17:32:34 +1300 от Amos Jeffries <squid3@treenet.co.nz>:<br>
<blockquote style="border-left:1px solid #0857A6; margin:10px; padding:0 0 0 10px;">
<div id="">
<div class="js-helper js-readmsg-msg">
<style type="text/css"></style>
<div>
<base target="_self" href="https://e.mail.ru/">
<div id="style_14186180160000000316_BODY">-----BEGIN PGP SIGNED MESSAGE-----<br>
Hash: SHA1<br>
<br>
On 13/12/2014 9:09 a.m., Александр Бубнов wrote:<br>
> I do not need to map it back remotely. I just need to know it. One<br>
> of my applications collects logs about all connections on a desktop<br>
> PC and another (ICAP server) collects what that applications sends<br>
> to the Internet. And to know that traffic belongs to certain<br>
> application I need to know port of the application on a desktop<br>
> PC.<br>
<br>
You could try using the adaptation_meta directive to add a custom<br>
header with %>p as the value parameter. I'm not sure if that will send<br>
a port number though.<br>
<a href="http://www.squid-cache.org/Doc/config/adaptation_meta/" target="_blank">http://www.squid-cache.org/Doc/config/adaptation_meta/</a><br>
<br>
There is near zero reliability that the port number outgoing from the<br>
client is the same number incoming to Squid. There are numerous<br>
potential layers of protocol and machinery re-numbering ports<br>
transparently between any two devices.<br>
<br>
<br>
The name of the client application is supposed to be sent in the<br>
User-Agent: HTTP header which gets delivered to ICAP already. For most<br>
legitimate uses of agent-sniffing UA header + IP is sufficient<br>
information.<br>
<br>
Amos<br>
<br>
-----BEGIN PGP SIGNATURE-----<br>
Version: GnuPG v2.0.22 (MingW32)<br>
<br>
iQEcBAEBAgAGBQJUjmRiAAoJELJo5wb/XPRj9skH/i6rlp7XmNptgfn/VgKtgH+v<br>
D22idQBsXyTC00LN2UQssz6Hrpk7nvK96dKObtSppJQ8Xtu1NrrPG1uSq1plRgBT<br>
d5EXRYnAMttTbI5KVDdXW6IsFSjTkL2Hr1m244BEv7SRUBNaa67XPpDjucoIX2kP<br>
8eIKZrB32jaW3/t2VDIl67iRKOZQh3DZfFqFrU6BgZCrLXjZXU/629+KBVnvNg/A<br>
TEnYXDBOSRwRVsWuLK/o0bZFI7y6wp0jtRT1ETliUpmdbGKKPSnMWLym2FX5VI+d<br>
8B1BSzbjEAP+sWex2oKE5Z7+FQ+eSf2tYLvS15fqAHe09hKqpJTMur4cumdkRM0=<br>
=LgMG<br>
-----END PGP SIGNATURE-----<br>
_______________________________________________<br>
squid-users mailing list<br>
<a href="/compose?To=squid%2dusers@lists.squid%2dcache.org">squid-users@lists.squid-cache.org</a><br>
<a href="http://lists.squid-cache.org/listinfo/squid-users" target="_blank">http://lists.squid-cache.org/listinfo/squid-users</a><br>
</div>
<base target="_self" href="https://e.mail.ru/">
</div>
</div>
</div>
</blockquote>
<br></BODY></HTML>