common log format doesn't capture that information...
http://onlamp.com/pub/a/apache/2004/04/22/blackbox_logs.html?page=3
that said, of the A-P or PAT box which isn't under your control in all
likelyhood anyway doesn't log the association of internal devices to
external ports then knowing the source port may not tell you that much
about which client you're talking to...
joel
Stephane Bortzmeyer wrote:
At the Transport Area meeting, Alain Durand, presenting
draft-ford-shared-addressing-issues mentioned that we may well have
now to always log the source port of a TCP request, not only the
source IP address (which may well be shared), if we want traceability.
Does anyone know if it is possible with the typical TCP servers? For
instance, I find no way to do it with Apache
<http://httpd.apache.org/docs/2.2/mod/mod_log_config.html>.
_______________________________________________
Ietf mailing list
Ietf(_at_)ietf(_dot_)org
https://www.ietf.org/mailman/listinfo/ietf
_______________________________________________
Ietf mailing list
Ietf(_at_)ietf(_dot_)org
https://www.ietf.org/mailman/listinfo/ietf