2015-09-15 - Re: [GRASE-Hotspot] User activity

Header Data

From: Timothy White <ti***8@gmail.com>
Message Hash: f9845d3be4950486b0bbb1f69f7ee2992bf46af0072948bb3890de1cba83d43c
Message ID: <CAESLx0K2XDj8_Vqc+R1ACwvaw4a_pQKJTc4ckhor4V6NNCEMUw@mail.gmail.com>
Reply To: <07bf9db0-9081-4273-98ce-5f2c013184a2@grasehotspot.org>
UTC Datetime: 2015-09-15 01:06:35 UTC
Raw Date: Tue, 15 Sep 2015 18:06:35 +1000

Raw message 

I've tried my best to write an FAQ about this.
https://github.com/GraseHotspot/grase-www-portal/wiki/FAQ#why-dont-i-see-all-websites-someone-has-visited-in-the-session-report-why-dont-https-sites-show-up

Please feel free to improve the FAQ, especially if you can make it
easier for people to understand!

The short version, HTTPS traffic doesn't pass through the transparent
proxy (and can't) so we can't log it. The methods for logging HTTPS
traffic require the user to modify their device, so I'm not
implementing them. On a side note, I also don't agree with the methods
for inspecting HTTPS traffic, as it's supposed to be secure traffic,
and I don't want someone doing online banking to be exposed to
unnecessary risks because someone wants to see exactly what URL's you
are accessing.

Regards

Tim

On Tue, Sep 15, 2015 at 2:21 PM, Firman Bugi <bu***n@gmail.com> wrote:
> hi Tim,
>
>
> can we get a history or log activity for HTTPS trafic ???
>
> its very use full for control user activity??
>
> thanks for great support
>
>
> Boegie
>
> On Monday, September 14, 2015 at 4:07:32 PM UTC+7, timwhite88 wrote:
>>
>> Hi Viktor
>>
>> Assuming everything has worked correctly, the report should show you
>> the URL's of all HTTP traffic. Due to how HTTPS works, we can't see
>> any of the URLs, not even the domains, of HTTPS traffic. More and more
>> traffic is moving to HTTPS, so you'll probably find less in the report
>> than a few years back.
>>
>> If you are sure you are accessing HTTP sites, there may be a bug that
>> needs fixing.
>>
>> Regards
>>
>> Tim
>>
>> On Thu, Aug 13, 2015 at 5:51 PM, Viktor Nikolaev
>> <sy***.@gmail.com> wrote:
>> > Tell me why the report does not show the URL of websites, but only the
>> > volume of traffic What did I do wrong? Grase 3.7, www-portal 3.8RC1
>> > Ubuntu
>> > server 12.04
>> >
>> > --
>> > This mailing list is for the Grase Hotspot Project
>> > http://grasehotspot.org
>> > ---
>> > You received this message because you are subscribed to the Google
>> > Groups
>> > "Grase Hotspot" group.
>> > To unsubscribe from this group and stop receiving emails from it, send
>> > an
>> > email to gr***.@grasehotspot.org.
>> > To post to this group, send email to gr***.@grasehotspot.org.
>> > Visit this group at
>> > http://groups.google.com/a/grasehotspot.org/group/grase-hotspot/.
>> > To view this discussion on the web visit
>> >
>> > https://groups.google.com/a/grasehotspot.org/d/msgid/grase-hotspot/a554b024-7734-46a1-9d8c-e351fb990b56%40grasehotspot.org.
>
> --
> This mailing list is for the Grase Hotspot Project http://grasehotspot.org
> ---
> You received this message because you are subscribed to the Google Groups
> "Grase Hotspot" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to gr***e@grasehotspot.org.
> To post to this group, send email to gr***t@grasehotspot.org.
> Visit this group at
> http://groups.google.com/a/grasehotspot.org/group/grase-hotspot/.
> To view this discussion on the web visit
> https://groups.google.com/a/grasehotspot.org/d/msgid/grase-hotspot/07bf9db0-9081-4273-98ce-5f2c013184a2%40grasehotspot.org.

Thread