The pfSense Store

Author Topic: imspector monitor website chats?  (Read 2937 times)

0 Members and 1 Guest are viewing this topic.

Offline UnderCover

  • Full Member
  • ***
  • Posts: 221
  • Karma: +0/-0
  • Purdue University
    • View Profile
    • Purdue University - Animal Science Departmental Website
imspector monitor website chats?
« on: February 14, 2008, 10:45:07 am »
lets say i go to webmessenger.yahoo.com and select website messenger, imspector seems to not record these types of sites... anyway to implement that?

Offline submicron

  • Global Moderator
  • Hero Member
  • *****
  • Posts: 741
  • Karma: +0/-0
  • I like pie!
    • View Profile
    • BSDPerimeter
Re: imspector monitor website chats?
« Reply #1 on: February 14, 2008, 11:15:34 am »
IMSpector logs IM traffic.  If you're using an http-based chat client, IMSpector will probably miss that. 
I do not respond to PMs demanding help.

Offline rsw686

  • Global Moderator
  • Sr. Member
  • *****
  • Posts: 520
  • Karma: +0/-0
    • View Profile
    • The Reptile File
Re: imspector monitor website chats?
« Reply #2 on: February 15, 2008, 01:17:00 pm »
Yep IMSpector will only log traffic over the actual IM protocol port.

Offline UnderCover

  • Full Member
  • ***
  • Posts: 221
  • Karma: +0/-0
  • Purdue University
    • View Profile
    • Purdue University - Animal Science Departmental Website
Re: imspector monitor website chats?
« Reply #3 on: February 15, 2008, 01:43:41 pm »
hmm anyway it can scan for 80 im traffic or is that too cluttered with other requests then for websites etc... i guess there really cant be a way to go around this except block the websites with a proxy filter then

Offline rsw686

  • Global Moderator
  • Sr. Member
  • *****
  • Posts: 520
  • Karma: +0/-0
    • View Profile
    • The Reptile File
Re: imspector monitor website chats?
« Reply #4 on: February 15, 2008, 02:24:55 pm »
hmm anyway it can scan for 80 im traffic or is that too cluttered with other requests then for websites etc... i guess there really cant be a way to go around this except block the websites with a proxy filter then

Nope it really can't work like that. The only thing you could do is use squid to block that website and force them to use the actual client.

Offline hadi57

  • Full Member
  • ***
  • Posts: 254
  • Karma: +0/-0
    • View Profile
Re: imspector monitor website chats?
« Reply #5 on: February 21, 2008, 02:31:50 pm »
hi

how to see the transferred files in imspector?

thanks in advance

Offline rsw686

  • Global Moderator
  • Sr. Member
  • *****
  • Posts: 520
  • Karma: +0/-0
    • View Profile
    • The Reptile File
Re: imspector monitor website chats?
« Reply #6 on: February 21, 2008, 02:34:49 pm »
hi

how to see the transferred files in imspector?

thanks in advance

It doesn't keep the transfered files. I don't think it would be a good idea anyway. For people will smaller drives on their pfSense box it could easily be filled up and potentially take down the system.

Offline hadi57

  • Full Member
  • ***
  • Posts: 254
  • Karma: +0/-0
    • View Profile
Re: imspector monitor website chats?
« Reply #7 on: February 21, 2008, 03:43:01 pm »
ic

thanks

Offline ShadowLab

  • Newbie
  • *
  • Posts: 10
  • Karma: +0/-0
    • View Profile
Re: imspector monitor website chats?
« Reply #8 on: February 24, 2008, 08:41:03 pm »
I also am having issues where the plugin doesn't seem to be doing anything.

I'm running pfSense v 1.2 RC4 with imspector v 0.4 installed though the packages manager.

I've tried logging to file and mysql, but it doesn't seem to be doing anything to either.

I've attached a screencap of my settings if it helps any.


Offline rsw686

  • Global Moderator
  • Sr. Member
  • *****
  • Posts: 520
  • Karma: +0/-0
    • View Profile
    • The Reptile File
Re: imspector monitor website chats?
« Reply #9 on: February 24, 2008, 08:48:10 pm »
You should see if you can see the messages on the console. You can start imspector in debug mode by running

/usr/local/etc/rc.d/imspector.sh stop
/usr/local/sbin/imspector -d -c /usr/local/etc/imspector/imspector.conf

What IM client are you using?

Offline ShadowLab

  • Newbie
  • *
  • Posts: 10
  • Karma: +0/-0
    • View Profile
Re: imspector monitor website chats?
« Reply #10 on: February 24, 2008, 10:15:52 pm »
I'm using Pidgin 2.3.1, but it should be the same, as it uses the same parent servers and protocols  ???

Offline ShadowLab

  • Newbie
  • *
  • Posts: 10
  • Karma: +0/-0
    • View Profile
Re: imspector monitor website chats?
« Reply #11 on: February 24, 2008, 10:28:00 pm »
Hm.... odd, when started normally, stopped, then restarted as a service, everything seems to have worked itself out.... might have needed a kickstart?

Thanks for your quick reply rsw :}

Offline rsw686

  • Global Moderator
  • Sr. Member
  • *****
  • Posts: 520
  • Karma: +0/-0
    • View Profile
    • The Reptile File
Re: imspector monitor website chats?
« Reply #12 on: February 24, 2008, 11:27:01 pm »
Did you leave the IM client connected when you first started imspector? If so that's why. Imspector has to be started first so it can intercept the IM client connection.