next »

[UnderCover]

lets say i go to webmessenger.yahoo.com and select website messenger, imspector seems to not record these types of sites... anyway to implement that?

[submicron]

IMSpector logs IM traffic.  If you're using an http-based chat client, IMSpector will probably miss that. 

[rsw686]

Yep IMSpector will only log traffic over the actual IM protocol port.

[UnderCover]

hmm anyway it can scan for 80 im traffic or is that too cluttered with other requests then for websites etc... i guess there really cant be a way to go around this except block the websites with a proxy filter then

[rsw686]

hmm anyway it can scan for 80 im traffic or is that too cluttered with other requests then for websites etc... i guess there really cant be a way to go around this except block the websites with a proxy filter then

Nope it really can't work like that. The only thing you could do is use squid to block that website and force them to use the actual client.

[hadi57]

hi

how to see the transferred files in imspector?

thanks in advance

[rsw686]

hi

how to see the transferred files in imspector?

thanks in advance

It doesn't keep the transfered files. I don't think it would be a good idea anyway. For people will smaller drives on their pfSense box it could easily be filled up and potentially take down the system.

[hadi57]

ic

thanks

[ShadowLab]

I also am having issues where the plugin doesn't seem to be doing anything.

I'm running pfSense v 1.2 RC4 with imspector v 0.4 installed though the packages manager.

I've tried logging to file and mysql, but it doesn't seem to be doing anything to either.

I've attached a screencap of my settings if it helps any.

[rsw686]

You should see if you can see the messages on the console. You can start imspector in debug mode by running

/usr/local/etc/rc.d/imspector.sh stop
/usr/local/sbin/imspector -d -c /usr/local/etc/imspector/imspector.conf

What IM client are you using?

[ShadowLab]

I'm using Pidgin 2.3.1, but it should be the same, as it uses the same parent servers and protocols 

[ShadowLab]

Hm.... odd, when started normally, stopped, then restarted as a service, everything seems to have worked itself out.... might have needed a kickstart?

Thanks for your quick reply rsw :}

[rsw686]

Did you leave the IM client connected when you first started imspector? If so that's why. Imspector has to be started first so it can intercept the IM client connection.